5.6 Identify and Describe Cybersecurity Threats Mitigated by the Following Endpoint Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company's security policy requires that all USB storage devices be blocked to prevent data exfiltration. However, the marketing department frequently needs to share large presentation files with external partners, and they have been using personal USB drives. The company wants to allow this business need while still maintaining a strong security posture. Which solution best balances security and business requirements?

   • AEnable disk encryption on all endpoints and allow all USB storage devices
   • BUse USB Control to allow only company-issued, encrypted USB drives with specific serial numbers
   • CBlock all USB storage devices and require employees to use email for file sharing
   • DUse a host-based firewall to block USB storage protocols
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following criteria can a USB control policy use to allow or block a USB device?

   • AFile extension and file size
   • BDevice type, vendor, or serial number
   • CNetwork IP address and port number
   • DUser password and biometric data
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company's security team discovers that a widely used third-party application has a newly disclosed critical vulnerability that is being actively exploited in the wild. They want to mitigate the risk on all endpoints as quickly as possible. Which action should they take first?

   • AConfigure a host-based firewall rule to block all inbound traffic to the application
   • BCreate an Application Control policy to block the vulnerable application from running until it is patched
   • CEnable disk encryption on all endpoints to protect the application's data
   • DDeploy the vendor's security patch to all endpoints through the patch management system
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following activities would a Host-based Intrusion Prevention System (HIPS) most likely analyze to detect malicious behavior?

   • ADisk encryption status and key management
   • BUSB device insertion and removal events
   • CSystem calls and process behavior on the endpoint
   • DInbound and outbound network packets
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is deploying new laptops to executives who travel internationally with sensitive corporate data. The security team is concerned about both the physical theft of the devices and the possibility of malware being installed while the executives are on untrusted networks. Which combination of controls is most important to implement?

   • ADevice Control and USB Control
   • BHIPS and Disk Encryption
   • CFull-disk encryption and a host-based firewall
   • DPatch Management and Application Control
   Reveal Solution Discussion Select an answer first