Lesson 6

Question 1

Which security model enforces the principle of least privilege by restricting administrative access on hosts?

Accepted Answer

Mandatory Access Control (MAC)

Question 2

Which host-based security solution prevents malware from injecting malicious code into legitimate processes?

Accepted Answer

Host Intrusion Prevention System (HIPS)

Question 3

Which host-based security approach creates isolated environments to run untrusted applications securely?

Accepted Answer

Both B and C

Question 4

Which security measure prevents unauthorized users from escalating privileges on a host system?

Accepted Answer

Role-Based Access Control (RBAC)

Question 5

Which security measure ensures that only digitally signed software is executed on a host?

Accepted Answer

Secure Boot

Question 6

Which host security mechanism enforces restrictions on which applications can execute on an endpoint?

Accepted Answer

Application whitelisting

Question 7

Which security measure protects sensitive data stored on hosts even if the physical device is stolen?

Accepted Answer

Full Disk Encryption (FDE)

Question 8

Which component of endpoint security continuously monitors host behavior to detect malicious activities?

Accepted Answer

Endpoint Detection and Response (EDR)

Question 9

Which of the following security measures best protects endpoints against zero-day malware threats?

Accepted Answer

Heuristic analysis and behavioral detection

Question 10

Which Windows security feature isolates critical processes from unauthorized modifications?

Accepted Answer

Windows Defender Credential Guard

Question 11

Which host security mechanism ensures that system patches are applied automatically to reduce vulnerabilities?

Accepted Answer

Patch Management System

Question 12

Which log file is crucial for investigating unauthorized login attempts on a Linux server?

Accepted Answer

/var/log/auth.log

Question 13

Which host security tool detects changes in system files to identify potential unauthorized modifications?

Accepted Answer

File Integrity Monitoring (FIM)

Question 14

Which Linux security framework is commonly used to enforce Mandatory Access Control (MAC) policies on hosts?

Accepted Answer

All of the above

Questions 14