CCP CCP Endpoint Security & Data Protection 1

Question 1

What is the primary function of an Endpoint Detection and Response (EDR) solution?

Accepted Answer

To monitor, detect, and respond to threats on individual devices

Answer

EDR solutions continuously monitor endpoint activities to detect, investigate, and respond to advanced threats in real time.

Question 2

Which technology enforces policies that determine whether a device is allowed to connect to a corporate network?

Accepted Answer

Network Access Control (NAC)

Answer

Network Access Control (NAC) evaluates device health and identity before granting or denying network access.

Question 3

What threat does Full Disk Encryption (FDE) primarily protect against?

Accepted Answer

Unauthorized data access when a device is physically lost or stolen

Answer

FDE renders all data on a device unreadable without proper authentication credentials, protecting it if the device is lost or stolen.

Question 4

A Data Loss Prevention (DLP) solution primarily focuses on:

Accepted Answer

Preventing unauthorized transmission of sensitive data outside the organization

Answer

DLP monitors and controls data movements to prevent sensitive information from being exfiltrated or shared without authorization.

Question 5

Which endpoint security technique detects unknown malware by analyzing suspicious behaviors rather than known signatures?

Accepted Answer

Heuristic and behavioral analysis

Answer

Heuristic and behavioral analysis identifies threats based on suspicious activities, enabling detection of zero-day and novel malware.

(CCP) Certified Cybersecurity Professional Practice Test