Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to track software versions in a software inventory?

   • ATo calculate the total storage space used by all applications
   • BTo identify endpoints that may be running outdated or vulnerable software
   • CTo ensure that all software is purchased from the same vendor
   • DTo determine which employees have administrative rights
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is an example of a configuration that should be verified for compliance?

   • AThe device's time zone is set correctly
   • BThe device's screen brightness is set to a specific level
   • CThe operating system's firewall is enabled
   • DThe device's wallpaper is the corporate logo
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has grown rapidly and suspects that there are unmanaged devices connected to the network. The security team needs to identify all devices and determine whether they meet the company's security baseline. Which approach is most effective?

   • AUse Active Directory to list all computer objects and assume that any device not in AD is unauthorized.
   • BDeploy a network discovery tool that scans the network for devices, then use an endpoint management agent to inventory software and configuration on each discovered device.
   • CCheck the DHCP server logs to list all IP addresses that have been assigned.
   • DConduct a physical walkthrough of the office and document all devices seen.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of maintaining a hardware inventory in an organization?

   • ATo identify and document all hardware assets so they can be managed and secured according to policy
   • BTo replace manual asset tracking with automated tools
   • CTo track which employees are using which devices
   • DTo calculate the total cost of all hardware purchases
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A financial services firm must comply with a regulation that requires daily backups of customer data and the ability to restore data from any backup within 4 hours. The firm currently performs nightly backups to a local NAS, but a recent ransomware attack encrypted the NAS and the backups. The firm needs to improve its backup strategy. Which change is most important to meet the regulatory requirement?

   • AImplement an immutable, offsite backup solution (e.g., object lock or write-once media) and regularly test restoration from those backups.
   • BPurchase a second NAS and replicate backups to it in real time.
   • CIncrease the frequency of backups to every 6 hours and keep them on the same NAS.
   • DStore backups on tape and keep them in a fireproof safe on-site.
   Reveal Solution Discussion Select an answer first