What practice is recommended before conducting testing to reduce risk of external interference?

• A. Run tests on a live production network
• B. Patch and harden all testing systems and shut off unnecessary services
• C. Leave services running during testing
• D. Use default credentials

Answer: (D)

Before conducting testing, secure and isolate the test environment to minimize external interference. Patch and harden the testing systems and shut off unnecessary services to reduce the attack surface and prevent noise or exploits from unrelated systems from skewing results. This setup keeps the testing observable and repeatable, ensuring that any findings come from the test activity itself rather than from exposed services or unpatched vulnerabilities. In contrast, testing on a live production network, leaving services running, or using default credentials all increase risk and invite external interference, making results unreliable and potentially dangerous.