Ensure DHCP Server is not enabled (Scored) The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Unless a server is specifically set up to act as a DHCP server, it is recommended that this service be deleted to reduce the potential attack surface. Fix: Remove or comment out start lines in /etc/init/isc-dhcp-server.conf and /etc/init/isc-dhcp-server6.conf: # start on runlevel [2345] oval:org.secpod.oval:def:33872 SCAP Repo OVAL Definition 2016-04-19