7.2 - Implement and Operate Endpoint Device Security SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which scenario best illustrates the benefit of full disk encryption on an endpoint?

   • AA host-based firewall blocks unauthorized inbound connections
   • BA laptop is stolen, and the thief cannot access the data without the decryption key
   • CA HIDS alerts on suspicious activity but does not block it
   • DAn application whitelist prevents malware from executing
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary function of a Trusted Platform Module (TPM)?

   • ATo allow only approved software to run on the device
   • BTo filter network traffic based on security rules
   • CTo provide hardware-based cryptographic operations, such as secure key storage and platform integrity verification
   • DTo monitor a host for suspicious activity and generate alerts
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Endpoint Detection and Response (EDR) tools?

   • ATo encrypt data at rest on endpoint devices
   • BTo filter incoming and outgoing traffic based on security rules
   • CTo allow only approved software to run on endpoints
   • DTo continuously monitor endpoints, detect advanced threats, and respond to incidents with forensic analysis
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes how a host-based intrusion prevention system (HIPS) operates?

   • AIt encrypts the host's storage to protect data at rest
   • BIt monitors a single host and generates alerts for suspicious activity without taking any action
   • CIt filters traffic at the network perimeter based on security rules
   • DIt analyzes system and network behavior on a single host and can block malicious activities in real time
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best describes how application whitelisting protects an endpoint?

   • AIt encrypts the endpoint's storage to protect data at rest
   • BIt monitors system behavior and alerts on suspicious activity
   • CIt prevents any software not on the approved list from executing
   • DIt blocks malicious network traffic based on a set of rules
   Reveal Solution Discussion Select an answer first