Endpoint Security Windows Systems CND Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which BitLocker feature is specifically designed to encrypt removable USB drives so that they can be protected when used on other computers?

   • AEncrypting File System (EFS)
   • BBitLocker Drive Encryption
   • CBitLocker To Go
   • DDevice Encryption
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of integrating Windows endpoints with an Endpoint Detection and Response (EDR) solution?

   • ATo provide continuous monitoring, threat detection, and automated response capabilities beyond traditional antivirus
   • BTo encrypt all data on the endpoint to prevent data breaches
   • CTo manage Windows updates and patch deployment
   • DTo replace the need for a firewall by blocking all network traffic
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A government agency wants to protect against credential theft attacks that use pass-the-hash and pass-the-ticket techniques on their Windows 10 endpoints. The endpoints are domain-joined and support virtualization-based security. Which security feature should be enabled to isolate and protect credentials?

   • AConfigure BitLocker to encrypt the system drive and require a pre-boot PIN.
   • BEnable Credential Guard via Group Policy and verify that the firmware supports virtualization-based security.
   • CEnable Device Guard to block untrusted applications from running.
   • DDeploy Windows Defender Exploit Guard with network protection enabled.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which Windows event log contains records of security-related events such as successful and failed logon attempts?

   • ASetup log
   • BSecurity log
   • CSystem log
   • DApplication log
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A retail chain's Windows 10 point-of-sale (POS) systems must receive security updates promptly, but the company wants to avoid disruptions during business hours. The POS systems are in a dedicated OU. Which patch management strategy should the administrator implement?

   • ASet the Windows Update service to 'Disabled' and rely on the EDR solution to patch vulnerabilities.
   • BConfigure Windows Update for Business with a deferral policy that delays updates by 7 days, and set active hours to overnight.
   • CDisable Windows Update and manually install updates only when a security incident occurs.
   • DConfigure the POS systems to use the 'Semi-Annual Channel' with a 30-day deferral.
   Reveal Solution Discussion Select an answer first