Sec+ - 10A - Implement Endpoint Security

What is the purpose of endpoint hardening?

• To increase the functionality of an operating system

• To minimize potential vulnerabilities and enhance system security

• To improve user accessibility

• To maximize attack surface

Which of the following is NOT a best practice for endpoint hardening

• Removing unnecessary software

• Limiting administrative privileges

• Allowing unrestricted application installations

• Strictly managing application updates

What is the essential principle of least functionality in device hardening?

• Systems should run only the protocols and services required by legitimate users

• Systems should run as many protocols and services as possible

• Systems should only run protocols and services for remote access

• Systems should only run protocols and services for local access

What is the purpose of persistent storage in device hardening?

• To hold temporary data generated by applications

• To store cached credentials securely

• To hold user data generated by applications and cached credentials securely

• To provide extra storage for applications

What role do best practice baselines play in device hardening?

• They complicate the system configuration

• They provide a starting point for secure configurations

• They limit access controls

• They prioritize functionality over security

What is the purpose of segmentation in securing an enterprise environment?

• To increase the attack surface

• To limit the spread of cybersecurity incidents

• To simplify an attacker's work

• To reduce data protection and privacy

How does device isolation contribute to endpoint protection?

• By increasing network traffic

• • By facilitating lateral spread of threats

• By limiting interaction between devices

• By expanding the attack surface

What is the primary purpose of full disk encryption (FDE)?

• To improve system performance

• To protect data in virtual machines

• To encrypt only system files and folders

• To ensure sensitive data is protected even if the storage device is removed

What does baseline deviation reporting involve in the context of endpoint security?

• Comparing actual configurations with baseline templates

• Reporting vulnerabilities in software

• Modifying baseline templates regularly

• Ignoring security baselines

Which tool has replaced the Microsoft Baseline Security Analyzer (MBSA) for validating security configurations on Windows networks?

• Security Compliance Toolkit

• Windows Update

• Microsoft Security Manager

• Microsoft Endpoint Protection