5.6 Identify and Describe Cybersecurity Threats Mitigated by the Following Endpoint Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A hospital's IT team is concerned about staff plugging personal USB drives into clinical workstations to transfer patient photos, which could introduce malware or leak sensitive data. They want to allow only approved USB drives issued by the IT department and block all others. Which endpoint security control should they configure?

   • AUSB Control policy that allows only USB devices matching approved vendor IDs and serial numbers
   • BDisk encryption policy that encrypts all data on the clinical workstations
   • CApplication Control policy that denies the file explorer application from running
   • DHost-based firewall rule that blocks all outbound traffic from clinical workstations
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary function of application control on an endpoint?

   • ATo allow or deny specific applications from running on the endpoint
   • BTo encrypt application data at rest
   • CTo monitor system calls made by applications
   • DTo filter network traffic based on application signatures
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of full-disk encryption on an endpoint?

   • ATo monitor system calls for suspicious behavior
   • BTo filter network traffic to and from the endpoint
   • CTo block malicious applications from running
   • DTo protect data at rest by rendering it unreadable without proper authentication
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which security threat is device control specifically designed to mitigate?

   • AMalicious system calls from compromised applications
   • BUnauthorized access to encrypted data
   • CNetwork-based attacks like port scanning
   • DData exfiltration via USB drives and external storage
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of device control in endpoint security?

   • ATo encrypt data on the hard drive
   • BTo restrict the use of peripheral devices to prevent data exfiltration and malware introduction
   • CTo filter network traffic on the endpoint
   • DTo analyze system calls for malicious behavior
   Reveal Solution Discussion Select an answer first