Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A hospital's backup policy requires that patient data backups be encrypted, retained for 7 years, and tested for restoration every 6 months. The current backup solution uses unencrypted tapes stored in a locked cabinet, and no restore tests have been performed in the last year. Which action should the IT team take first to improve compliance?

   • ASwitch to a cloud backup service that provides encryption by default, but do not perform restore tests.
   • BExtend the retention period to 10 years to ensure compliance with the 7-year requirement.
   • CContinue using the current tapes but label them with the retention date and store them in a more secure location.
   • DImplement an encrypted backup solution (e.g., encrypted tape or disk) and schedule a quarterly restore test.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A sales team uses personal laptops to access customer data. The security team discovers that several laptops have full-disk encryption disabled. The policy requires that all devices storing customer data be encrypted. What is the most effective way to enforce this policy across the team?

   • ASend a company-wide email reminding employees to enable BitLocker or FileVault on their laptops.
   • BDeploy an MDM/endpoint management tool that can detect encryption status and remotely enforce full-disk encryption on enrolled devices.
   • CDisconnect any laptop that is not encrypted from the corporate Wi-Fi network.
   • DRequire employees to sign a form acknowledging the encryption policy.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A law firm allows attorneys to use personal smartphones to access client emails. The firm's policy requires that sensitive client data be encrypted on these devices. Which technology should the firm enforce?

   • AProhibit the use of personal smartphones for work purposes.
   • BAsk attorneys to manually enable encryption in their device settings.
   • CRequire the use of a mobile device management (MDM) profile that enforces device encryption and a strong passcode.
   • DUse a containerization app that encrypts only the corporate email data.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a key benefit of maintaining an accurate hardware inventory?

   • AIt reduces the need for user training on security policies
   • BIt guarantees that all devices are patched automatically
   • CIt eliminates the need for endpoint security software
   • DIt helps detect unauthorized or rogue devices on the network
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An online retailer that processes credit card payments must ensure that point-of-sale (POS) endpoints comply with PCI DSS. Which control is specifically required by PCI DSS for these endpoints?

   • AEncrypt all data at rest on the POS endpoints using AES-256.
   • BConduct annual security awareness training for all employees.
   • CRestrict access to cardholder data on a need-to-know basis and use file-integrity monitoring.
   • DImplement multi-factor authentication for all POS users.
   Reveal Solution Discussion Select an answer first