SIEM, UBA/UEBA, and Endpoint Security Solutions NDE Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is a recommended practice for deploying endpoint security solutions in an enterprise?

   • APilot testing on a small group before full deployment
   • BDeploying to all endpoints at once without testing
   • CUsing the same configuration for all device types without adjustment
   • DInstalling only on servers and not on workstations
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the primary function of Endpoint Detection and Response (EDR) tools?

   • AContinuous monitoring and response to advanced threats on endpoints
   • BEncrypting all network traffic
   • CManaging user passwords and authentication
   • DReplacing the need for network firewalls
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A UEBA system alerts on a user who is accessing a sensitive database at an unusual time. The security team checks the SIEM and finds that the user's credentials were used from a workstation that is not the user's assigned device. What is the most likely conclusion?

   • AThe UEBA system is malfunctioning
   • BThe user's account may be compromised
   • CThe SIEM logs are incorrect
   • DThe user is working remotely from a new device
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Why is endpoint security important in an enterprise environment?

   • AEndpoints do not require any security controls if the network is protected
   • BEndpoints are common entry points for malware and ransomware
   • CEndpoint security is only needed for servers, not workstations
   • DEndpoint security is primarily about physical locks on devices
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   Which type of threat is endpoint security specifically designed to mitigate?

   • ADistributed denial-of-service attacks against the corporate website
   • BSQL injection attacks on a web application
   • CRansomware that encrypts files on a user's laptop
   • DDNS cache poisoning on the internal DNS server
   Reveal Solution Discussion Select an answer first