7.2 - Implement and Operate Endpoint Device Security SSCP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A law firm has a mix of Windows laptops and macOS laptops used by attorneys. The firm's compliance policy requires that all data at rest be encrypted. The IT team wants to use full disk encryption, but they are concerned about the performance impact on older laptops and the need to recover data if a user forgets their password. They also want to ensure that encryption keys are protected by hardware. Which approach should they take?

   • AUse a VPN for all communications and rely on the cloud for data storage
   • BUse file-level encryption on both platforms
   • CUse BitLocker on Windows and FileVault on macOS, with keys stored in the TPM for Windows and the Secure Enclave for macOS
   • DUse a third-party full disk encryption solution that supports both Windows and macOS
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization has experienced a series of advanced persistent threats (APTs) that evaded traditional antivirus. The security team needs a solution that can continuously monitor endpoints, detect suspicious behavior, and provide forensic data for incident response. They also want to be able to isolate an infected endpoint from the network quickly. Which tool should they deploy?

   • AHost-based intrusion prevention system (HIPS)
   • BA network-based intrusion detection system (NIDS)
   • CHost-based intrusion detection system (HIDS)
   • DEndpoint detection and response (EDR)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of a host-based firewall?

   • ATo encrypt data at rest on the host to protect confidentiality
   • BTo monitor a host for suspicious activity and generate alerts without blocking threats
   • CTo analyze system and network behavior on a host and block malicious activities
   • DTo filter incoming and outgoing traffic on a single host based on security rules
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's users frequently access a web-based customer portal. The security team wants to ensure that all communications with the portal are encrypted and that the portal's identity is verified. They also want to block access to the portal if the certificate is invalid. Which combination of controls should be implemented?

   • AUse a VPN for all internet traffic
   • BEnforce HTTPS and validate digital certificates on the client
   • CUse a host-based firewall to allow only port 443
   • DDeploy EDR to detect malicious web traffic
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the main function of a host-based intrusion detection system (HIDS)?

   • ATo monitor a host for suspicious activity and generate alerts without blocking threats
   • BTo filter incoming and outgoing traffic on a host based on security rules
   • CTo encrypt data at rest on the host to protect confidentiality
   • DTo actively block malicious activities on a host by analyzing system behavior
   Reveal Solution Discussion Select an answer first