Which scenario does full-disk encryption primarily protect against?

Data theft from a lost or stolen laptop

Unauthorized network connections to the endpoint

Unauthorized applications running on the endpoint

Malware being introduced via USB drives

A company is experiencing a series of malware infections that are traced back to employees using personal USB drives. The company wants to eliminate this threat vector but is concerned that a complete block on USB devices will disrupt the use of USB keyboards, mice, and other legitimate peripherals. Which approach should be taken?

Use Device Control to block all USB devices and require users to use PS/2 peripherals

Use a host-based firewall to block all USB-related traffic

Use Application Control to block the execution of malware from USB drives

Use USB Control to block all USB mass storage devices while allowing other device types like HID

What is the primary function of a Host-based Intrusion Prevention System (HIPS)?

To filter network traffic based on IP addresses and ports

To control which applications can run on the endpoint

To monitor and block malicious activities on the host by analyzing system calls, file modifications, and process behavior

To encrypt data stored on the hard drive

Which type of traffic does a host-based firewall primarily inspect and control?

System calls made by applications to the operating system kernel

Access to peripheral devices like USB drives and printers

Traffic between the endpoint and other network hosts

Data being written to and read from the hard disk

An engineering firm wants to allow employees to use USB keyboards and mice, but wants to prevent the use of USB storage devices to reduce the risk of data exfiltration. Which USB Control policy should they implement?

Block all USB devices except those with specific serial numbers

Allow USB devices by type, permitting HID devices (keyboards/mice) and blocking mass storage devices

Allow all USB devices but enable disk encryption on the endpoints

Use a host-based firewall to block USB storage protocols

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 5Objective 6

5.6 Identify and Describe Cybersecurity Threats Mitigated by the Following Endpoint Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Part of the Endpoint Security domain, which accounts for 15% of the CYBERSECURITY-PRACTITIONER exam.

30questions here

6free pages

7concepts

15%of the exam

Questions 1–5

1foundation · easy
Which scenario does full-disk encryption primarily protect against?
Select an answer first
2expert · hard
A company is experiencing a series of malware infections that are traced back to employees using personal USB drives. The company wants to eliminate this threat vector but is concerned that a complete block on USB devices will disrupt the use of USB keyboards, mice, and other legitimate peripherals. Which approach should be taken?
Select an answer first
3foundation · easy
What is the primary function of a Host-based Intrusion Prevention System (HIPS)?
Select an answer first
4foundation · easy
Which type of traffic does a host-based firewall primarily inspect and control?
Select an answer first
5application · medium
An engineering firm wants to allow employees to use USB keyboards and mice, but wants to prevent the use of USB storage devices to reduce the risk of data exfiltration. Which USB Control policy should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.