What is the primary purpose of endpoint security in an organization?

To encrypt all data transmitted between the organization and external cloud providers

To secure individual devices such as laptops, desktops, and mobile devices that connect to the network

To protect network infrastructure devices such as routers and switches from unauthorized access

To monitor and manage user access rights across all applications in the organization

A company's security team is implementing a new endpoint security policy. The policy requires that all endpoints have antivirus, a host-based firewall, and full-disk encryption. The team needs to verify that all endpoints are compliant. Which process should be used?

Use a centralized management console to query each endpoint's security configuration.

Deploy a new image to all endpoints and assume they are compliant.

Perform a manual audit of each endpoint by visiting every workstation.

Ask users to confirm that their endpoints have the required security software.

What is the purpose of policy enforcement in endpoint security management?

To automatically respond to security incidents without human intervention

To ensure that endpoints comply with the organization's security requirements

To provide users with administrative access to their devices

To monitor network traffic for potential intrusions

What is the principle of least privilege in the context of endpoint hardening?

Disabling all unnecessary services on the endpoint

Installing only the latest version of software on all endpoints

Granting users only the permissions necessary to perform their job functions

Requiring users to change their passwords every 30 days

A security analyst notices that a workstation is sending large amounts of data to an external IP address at odd hours. The EDR shows a legitimate business application making the connections. The application is required for operations. What is the best course of action?

Disable the application on the workstation.

Immediately block the external IP address at the firewall.

Ignore the alert because the application is legitimate.

Investigate the application's behavior and network traffic to determine if it is expected.

GIAC Security Essentials

Domain 4Objective 2

Endpoint Security GSEC Practice Questions (Page 7)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 31–35

31foundation · easy
What is the primary purpose of endpoint security in an organization?
Select an answer first
32application · medium
A company's security team is implementing a new endpoint security policy. The policy requires that all endpoints have antivirus, a host-based firewall, and full-disk encryption. The team needs to verify that all endpoints are compliant. Which process should be used?
Select an answer first
33foundation · easy
What is the purpose of policy enforcement in endpoint security management?
Select an answer first
34foundation · easy
What is the principle of least privilege in the context of endpoint hardening?
Select an answer first
35expert · hard
A security analyst notices that a workstation is sending large amounts of data to an external IP address at odd hours. The EDR shows a legitimate business application making the connections. The application is required for operations. What is the best course of action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.