Which UAC setting, configurable via the Local Security Policy or Group Policy, causes the user to be prompted for credentials on the secure desktop when an administrative task is attempted?

Prompt for credentials on the secure desktop

Prompt for consent on the secure desktop

Automatically deny elevation requests

An organization wants to enable Credential Guard on all Windows 10 Enterprise endpoints. However, some endpoints are older and do not support virtualization-based security (VBS). The security team also wants to maintain compatibility with a legacy VPN client that requires access to the Local Security Authority (LSA) process. Which approach should the administrator take?

Enable Credential Guard only on endpoints that support VBS, and configure the legacy VPN client to run in a separate process or use a compatibility mode.

Use BitLocker with a TPM protector to protect credentials on endpoints that do not support VBS.

Enable Credential Guard on all endpoints and disable the legacy VPN client's access to LSA by using a Group Policy setting.

Enable Device Guard instead of Credential Guard on all endpoints to avoid LSA compatibility issues.

Which Windows service is often disabled by security administrators to reduce the attack surface because it provides remote registry access and is rarely needed in most environments?

Windows Defender Antivirus Service

EC-CouncilCertified Network Defender

Domain 2Objective 2

Endpoint Security Windows Systems CND Practice Questions (Page 5)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

45questions here

9free pages

12concepts

12 Concepts in This Objective

Windows Security Architecture
User Account Control (UAC)
Windows Firewall with Advanced Security
Windows Defender Antivirus and Exploit Guard
BitLocker Drive Encryption
AppLocker and Windows Defender Application Control
Credential Guard and Device Guard
Windows Update and Patch Management
Security Policies and Group Policy
Event Logging and Auditing
Endpoint Detection and Response (EDR) Integration
Hardening Windows Services and Registry

Questions 21–25

21foundation · easy
Which Windows Update setting allows an administrator to defer feature updates for a specified number of days to allow time for testing before deployment?
Select an answer first
22foundation · easy
Which audit policy category must be enabled to record events when a user attempts to log on to a Windows system?
Select an answer first
23foundation · easy
Which UAC setting, configurable via the Local Security Policy or Group Policy, causes the user to be prompted for credentials on the secure desktop when an administrative task is attempted?
Select an answer first
24expert · hard
An organization wants to enable Credential Guard on all Windows 10 Enterprise endpoints. However, some endpoints are older and do not support virtualization-based security (VBS). The security team also wants to maintain compatibility with a legacy VPN client that requires access to the Local Security Authority (LSA) process. Which approach should the administrator take?
Select an answer first
25foundation · easy
Which Windows service is often disabled by security administrators to reduce the attack surface because it provides remote registry access and is rarely needed in most environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Endpoint Security Windows Systems CND Practice Questions (Page 5)

Questions 21–25

Which Windows Update setting allows an administrator to defer feature updates for a specified number of days to allow time for testing before deployment?

Which audit policy category must be enabled to record events when a user attempts to log on to a Windows system?

Which UAC setting, configurable via the Local Security Policy or Group Policy, causes the user to be prompted for credentials on the secure desktop when an administrative task is attempted?

Which Windows service is often disabled by security administrators to reduce the attack surface because it provides remote registry access and is rarely needed in most environments?

Keep studying — Perimeter and Endpoint Security