NEW
Font size
WorksheetsDay 5 - Chapter 11 - Endpoint Security
Total questions: 20
Worksheet time: 10mins
Lin's hardware manufacturer has stopped selling the model of device that Lin's organization uses and has also stopped providing security or other updates. What phase of the hardware life cycle is the device in?
End-of-life
Legacy
End-of-sales
Senescence
Naomi has discovered the following TCP ports open on a system she wants to harden. Which ports are used for unsecure services and thus should be disabled to allow their secure equivalents to continue to be used?
21, 22, and 80
21 and 80
21, 23, and 80
22 and 443
Frank's organization is preparing to deploy a data loss prevention (DLP) system. What key process should they undertake before they deploy it?
Define data life cycles for all nonsensitive data.
Encrypt all sensitive data.
Implement and use a data classification scheme.
Tag all data by creator or owner.
Oliver wants to store and manage secrets in his cloud service provider's environment. What type of solution should he look for as part of their offerings?
A TPM
A secure enclave
A KMS
A Titan M
What is the key difference between EDR and XDR solutions?
The variety of malware it can detect
The number of threat feeds that are used
The breadth of the technology stack that is covered
The volume of logs that can be processed
Michelle wants to prevent unauthorized applications from being installed on a Windows system. What type of tool can she use to stop applications from being installed?
Antivirus
A GPO
An EDR
A HIPS
What term is used to describe tools focused on detecting and responding to suspicious activities occurring on endpoints like desktops, laptops, and mobile devices?
EDR
IAM
FDE
ESC
Fred has recently purchased a network router and is preparing to deploy it. Which of the following is a common step in deploying new routers?
Disabling unwanted services
Removing unnecessary software
Installing antivirus
Changing default passwords
Charlene wants to prevent attacks against her system that leverage flaws in the services that it provides while still keeping the services accessible. What hardening technique should she use?
A host-based firewall
A host-based IPS
Encryption
An EDR
Allan is preparing to harden his organization's network switches. Which of the following is not a common hardening technique for network devices?
Removing unnecessary software
Installing patches
Administrative VLANs
Changing default passwords
Helen's organization is planning to deploy IoT devices across their buildings as part of an HVAC system. What security control should she recommend to help protect the devices on the network?
Install host-based firewalls.
Deploy the IoT devices to a protected VLAN.
Install host-based IPS.
Disable the web interfaces for the IoT devices.
What is the primary reason to remove unnecessary software during hardening efforts?
To reduce the attack footprint of the device
To reduce the number of patches that are installed
To reduce the number of firewall rules required for the device
To support incident response (IR) activities
Brian has deployed a system that monitors sensors and uses that data to manage the power distribution for the power company that he works for. Which of the following terms is commonly used to describe this type of control and monitoring solution?
SCADA
SIM
HVAC
AVAD
The organization that Lynn works for wants to deploy an embedded system that needs to process data as it comes in to the device without processing delays or other interruptions. What type of solution does Lynn's company need to deploy?
An MFP
A HIPS
An SoC
An RTOS
Which of the following is not a common constraint of an embedded system?
Compute
Cost
Network
Authentication
Jim configures a Windows machine with the built-in BitLocker full-disk encryption tool that uses a TPM chip. When is the machine least vulnerable to having data stolen from it?
When the machine is off
When the machine is booted and logged in but is locked
When the machine is booted and logged in but is unlocked
When the machine is booted and logged in but is asleep
Olivia wants to install a host-based security package that can detect attacks against the system coming from the network, but she does not want to block them. What type of tool could she install that will meet this requirement?
A host firewall
A host-based intrusion detection system
A host-based intrusion prevention system
A data loss prevention tool
Anita wants to enforce security settings across her organization's Windows Active Directory domain. What tool can she use to do this?
EDR
Group Policy
XDR
SELinux
Chris wants systems that connect to his network to report their boot processes to a server where they can be validated before being permitted to join the network. What technology should he use to do this on the workstations?
UEFI/Trusted boot
BIOS/Trusted boot
UEFI/Measured boot
BIOS/Measured boot
Elaine wants to securely erase the contents of a tape used for backups in her organization's tape library. What is the fastest secure erase method available to her that will allow the tape to be reused?
Using a degausser
Wiping the tape by writing a random pattern of 1s and 0s to it
Incinerating the tape
Wiping the tape by writing all 1s or all 0s to it
