What does Secure Boot do?

Ensures a device will only boot using a trusted OS

What is a 'host-based' security application?

A security application that runs locally on a computer

What is the purpose of application allow-listing?

Permitting only certain applications to run

What is the purpose of application block-listing?

Preventing only certain applications from running

Why would a Windows computing environment be more prone to attack than a Linux computing environment?

Windows is far more common than Linux

What type of endpoint protection permits only authorized devices to connect to a network?

Network Admission and Control (NAC)

What is an attack surface?

The total sum of vulnerabilities in a given system

studbud

CCST Cybersecurity objective 3: Endpoint Security Concepts

15 termsStudBud Administration47 plays

Imported from external platform

Flashcards15 cardsFPractice quizPHost liveL

Questions 15

Answers

1
What technique allows suspicious files to be executed and analyzed in a safe environment?
Sandboxing
Firewalling
Quarantining
Isolating
2
What are the three attack surfaces recognized by the SANS Institute?
Internet, LAN, and Host
Global, Local, and Cloud
Network, Software, and Human
Domain, Application, and User
3
What does Secure Boot do?
Requires a password to access BIOS
Requires a password to initiate the boot sequence
Ensures a device will only boot using a trusted OS
Prevents dual-boot configuration
4
What is a 'host-based' security application?
A security application that prevents malware infections
A security application that is hosted in the cloud
A security application that runs locally on a computer
A security application that scans individual hosts from a central server
5
What is the purpose of application allow-listing?
Permitting all applications to run
Preventing all applications from running
Permitting only certain applications to run
Preventing only certain applications from running
6
What is the purpose of application block-listing?
Permitting all applications to run
Preventing only certain applications from running
Permitting only certain applications to run
Preventing all applications from running
7
What does Windows use for FDE?
BitLocker
NTFS
EFS
Windows Defender
8
What does MacOS use for FDE?
XProtect
MacVault
AppleLock
FileVault
9
Why would a Windows computing environment be more prone to attack than a Linux computing environment?
Windows does not utilize host-based endpoint security
Windows is far more common than Linux
There are more security tools available for Linux
Windows is poorly written
10
What is a NGFW?
Node Group Firewall
Network Group Firewall
Next Generation Firewall
Node Grid Fiber Wire
11
What type of anti-malware recognizes the characteristics of known malware files?
activity-based
behavior-based
heuristics-based
signature-based
12
What type of endpoint protection permits only authorized devices to connect to a network?
Network Admission and Control (NAC)
antimalware
host-based security suite
host-based firewall
13
Which of the following would be considered an endpoint?
Firewall
Switch
Router
Server
14
What is MacOS's native host-based anti-malware app?
XProtect
MacVault
AppleLock
FileVault
15
What is an attack surface?
The total sum of vulnerabilities in a given system
The interface used by a threat actor to initiate an attack
A weakness in a system or its design that could be exploited
The operating domain in which an attack is generated

CCST Cybersecurity objective 3: Endpoint Security Concepts Flashcards | StudBud