Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is preparing for a software licensing audit. The IT team needs to verify that all installed software is properly licensed and that no unauthorized software is present. The company has a mix of Windows and macOS endpoints. Which approach is most effective?

   • ACheck the company's purchasing records to determine which software licenses were bought.
   • BUse a software inventory tool that supports both Windows and macOS, and reconcile the inventory with the license database.
   • CAsk each employee to report the software they have installed on their computer.
   • DRun a script on Windows endpoints only, since macOS is less commonly targeted by unlicensed software.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has 500 endpoints with a mix of Windows 10, Windows 11, and Ubuntu 22.04. The security policy requires that all endpoints receive security patches within 7 days of release. The IT team has a limited budget and cannot afford a commercial patch management suite. Which approach is most effective while staying within budget?

   • AUse a combination of Windows Server Update Services (WSUS) for Windows and a scheduled cron job with unattended-upgrades for Ubuntu, and generate compliance reports from each system.
   • BUse a free open-source patch management tool that supports only Windows, and manually patch Ubuntu endpoints.
   • CEnable automatic updates on each endpoint and rely on the OS vendor's default schedule.
   • DCreate a manual patching schedule where each administrator patches a subset of endpoints every Friday.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common method to ensure data encryption on BYOD devices?

   • AAsking users to manually encrypt individual files
   • BUsing a simple password to protect the device
   • CEnforcing full-disk encryption through a mobile device management policy
   • DStoring all data in the cloud only
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small law firm handles client data that is subject to GDPR. The firm's backup policy states that backups must be encrypted and retained for at least 12 months. The IT administrator discovers that the current backup solution stores unencrypted copies on a local NAS and keeps only 6 months of history. What should the administrator do first to align with policy?

   • ANotify the partners that the policy is unrealistic and recommend reducing the retention period to 6 months.
   • BMove the NAS to a locked server room and restrict physical access to the IT team.
   • CReconfigure the backup software to encrypt backups and extend the retention period to 12 months, then verify a test restore.
   • DDelete the existing backups immediately and start fresh with a new backup solution.
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A company that processes credit card payments must comply with PCI DSS. The company also stores customer personal data and is subject to GDPR. The security team is designing endpoint security controls. Which combination of controls best addresses both regulations?

   • AFocus only on PCI DSS controls because credit card data is more sensitive.
   • BConduct annual risk assessments but do not implement technical controls.
   • CUse encryption for credit card data but not for personal data.
   • DImplement access controls, encryption, and regular security testing on all endpoints that process or store regulated data.
   Reveal Solution Discussion Select an answer first