thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Attack Surface

The total set of points where an unauthorized user could try to enter or extract data from a system.

Definition

The attack surface includes network services, open ports, APIs, user interfaces, software dependencies, accounts, and physical access points. Reducing it through hardening, segmentation, and removal of unused components lowers risk. Attack surface management tools continuously discover exposed assets.

Example

Shutting down an unused public FTP server shrinks the organization's external attack surface.

Exam tip

Any question about removing unnecessary software or services relates to reducing the attack surface.

Related terms