A financial firm has a strict policy that employees may only use approved business applications. Recently, an employee installed a personal file-sharing application that is known to have unpatched vulnerabilities, creating a risk of malware infection. The firm wants to prevent this application from running on any managed endpoint. Which control should be implemented?

Application Control policy that denies the specific file-sharing application

Patch Management policy that automatically updates the file-sharing application

Device Control policy that blocks the application's installation files from USB drives

Host-based firewall rule that blocks the application's network ports

What is the primary security benefit of implementing USB control policies?

Analyzing system calls from USB drivers

Mitigating risks from removable media by allowing only approved USB devices

Encrypting data stored on USB drives

Monitoring network traffic from USB devices

What is the primary purpose of patch management in endpoint security?

To encrypt data on the endpoint's hard drive

To restrict the use of USB devices

To filter network traffic based on application signatures

To systematically apply security updates to operating systems and applications to close known vulnerabilities

Which threat is application control specifically designed to mitigate?

Data exfiltration via USB drives

Unauthorized software and known vulnerable applications running on the endpoint

Malicious system calls from compromised drivers

Network-based attacks like DDoS

A company is deploying new laptops to its field auditors. These auditors often travel and handle sensitive financial data. The company wants to ensure that if a laptop is lost or stolen, the data on the hard drive cannot be accessed. Which control should be the primary focus of the deployment?

Implementing an Application Control policy to allow only approved financial software

Enabling full-disk encryption on all laptops

Configuring a host-based firewall to block all inbound traffic

Setting up a patch management schedule for the operating system

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 5Objective 6

5.6 Identify and Describe Cybersecurity Threats Mitigated by the Following Endpoint Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 6)

Part of the Endpoint Security domain, which accounts for 15% of the CYBERSECURITY-PRACTITIONER exam.

30questions here

6free pages

7concepts

15%of the exam

Questions 26–30

26application · medium
A financial firm has a strict policy that employees may only use approved business applications. Recently, an employee installed a personal file-sharing application that is known to have unpatched vulnerabilities, creating a risk of malware infection. The firm wants to prevent this application from running on any managed endpoint. Which control should be implemented?
Select an answer first
27foundation · easy
What is the primary security benefit of implementing USB control policies?
Select an answer first
28foundation · easy
What is the primary purpose of patch management in endpoint security?
Select an answer first
29foundation · easy
Which threat is application control specifically designed to mitigate?
Select an answer first
30application · medium
A company is deploying new laptops to its field auditors. These auditors often travel and handle sensitive financial data. The company wants to ensure that if a laptop is lost or stolen, the data on the hard drive cannot be accessed. Which control should be the primary focus of the deployment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.