CCP CCP Endpoint Security & Data Protection

Question 1

What is the primary function of an Endpoint Detection and Response (EDR) solution?

Accepted Answer

To monitor, detect, and respond to threats on individual devices

Answer

To filter web traffic at the network perimeter

Answer

To centrally manage user access credentials

Answer

To encrypt data in transit between endpoints

Question 2

Which technology enforces policies that determine whether a device is allowed to connect to a corporate network?

Accepted Answer

Network Access Control (NAC)

Answer

Data Loss Prevention (DLP)

Answer

Host-based Intrusion Detection System (HIDS)

Answer

Full Disk Encryption (FDE)

Question 3

What threat does Full Disk Encryption (FDE) primarily protect against?

Accepted Answer

Unauthorized data access when a device is physically lost or stolen

Answer

Malware delivered via email attachments

Answer

Network-based intrusion attempts on the device

Answer

Insider threats from authenticated users

Question 4

A Data Loss Prevention (DLP) solution primarily focuses on:

Accepted Answer

Preventing unauthorized transmission of sensitive data outside the organization

Answer

Detecting malware signatures on endpoints

Answer

Blocking network intrusions at the perimeter firewall

Answer

Monitoring user authentication events

Question 5

Which endpoint security technique detects unknown malware by analyzing suspicious behaviors rather than known signatures?

Accepted Answer

Heuristic and behavioral analysis

Answer

Signature-based detection

Answer

Blacklisting

Answer

Cryptographic hash comparison

Question 6

What distinguishes a Host-based Intrusion Prevention System (HIPS) from a HIDS?

Accepted Answer

HIPS actively blocks suspicious activity while HIDS only detects and alerts

Answer

HIPS monitors network traffic while HIDS monitors host processes

Answer

HIPS operates at the network level while HIDS operates at the host level

Answer

HIPS uses signature detection while HIDS uses behavioral analysis