Objective 2.22 Describe the Use and Configuration of Endpoint Checks (e.g., Registry Check, Process Check, Windows Info, Machine Cert Auth) 304 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a machine certification check in an APM access policy?

   • ATo ensure that the client's operating system is up-to-date
   • BTo authenticate the client machine using a certificate
   • CTo verify that the client has a valid antivirus license
   • DTo check that the client's firewall is enabled
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An administrator is configuring an access policy for a mixed environment with both Windows and macOS clients. The policy must enforce a firewall check on Windows clients, but macOS clients do not have the same firewall check available. What is the most appropriate approach to handle this without breaking access for macOS users?

   • AAdd the Firewall check to the main policy and configure it to allow macOS clients by default.
   • BUse a client-type branch to send Windows clients to a policy branch with the Firewall check, and macOS clients to a branch without the check.
   • CAdd a File check for the firewall configuration file that exists on both platforms.
   • DUse a single Registry check that works on both Windows and macOS to verify firewall status.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization's security team wants to ensure that only domain-joined Windows laptops can access a sensitive internal application. They have confirmed that the domain join status is stored in the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System with a value named 'DomainJoinInfo'. What should the APM administrator configure in the access policy to enforce this requirement?

   • AAdd a Process check to verify that the Netlogon service is running.
   • BAdd a Registry check that verifies the existence of the specified key and value.
   • CAdd a Machine Certification check to verify the client has a certificate issued by the domain CA.
   • DAdd a File check to verify the presence of the registry hive file on the local disk.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An administrator wants to ensure that only client machines with a valid certificate can access a resource. Which endpoint check should be configured?

   • ARegistry check
   • BFile check
   • CProcess check
   • DMachine certification check
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What does a registry check in an APM access policy validate on the client?

   • AThe existence of specific files and their properties
   • BThe status of the client's firewall
   • CThe presence and value of specific Windows registry keys
   • DThe running state of specific processes
   Reveal Solution Discussion Select an answer first