Endpoint Security GSEC Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary purpose of Endpoint Detection and Response (EDR) solutions?

   • ATo detect and investigate suspicious activities on endpoints and enable rapid response to threats
   • BTo enforce password policies on endpoints
   • CTo replace the need for traditional antivirus software
   • DTo manage software licenses across the organization
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Why is endpoint security considered a critical component of an organization's overall security posture?

   • ABecause endpoints are often the primary target for attackers seeking to gain initial access to a network
   • BBecause endpoints are the only devices that can be infected with malware
   • CBecause endpoint security eliminates the need for network security controls
   • DBecause endpoints are always located outside the organization's physical perimeter
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company allows employees to use personal smartphones to access corporate email. The security team wants to protect corporate data without requiring full device management. Which technology is most appropriate?

   • AMobile application management (MAM) with containerization of corporate email.
   • BRequiring users to use a VPN at all times.
   • CA host-based firewall on the smartphone.
   • DFull device management (MDM) that can wipe the entire phone.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company's incident response team is responding to a malware outbreak on several endpoints. The team has isolated the affected endpoints and is now collecting forensic evidence. Which process should be followed to ensure the evidence is preserved and the chain of custody is maintained?

   • AImmediately reimage the affected endpoints to restore service quickly.
   • BRun a full antivirus scan on the affected endpoints to remove the malware.
   • CCreate a forensic image of each affected endpoint's disk and memory before any further actions.
   • DAsk users to describe what they did before the infection was detected.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a common attack vector that targets endpoints through deceptive communication?

   • ASQL injection
   • BMan-in-the-middle (MITM)
   • CPhishing
   • DDenial of service (DoS)
   Reveal Solution Discussion Select an answer first