Where technically feasible, enable only the logical network accessible ports the entity has determined are needed, including port ranges or services for dynamic ports; if a device cannot disable or restrict logical ports, its open ports are deemed needed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.