CCP Endpoint Security & Data Protection Flashcards
6 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CCP Endpoint Security & Data Protection flashcards as text
What is the primary function of an Endpoint Detection and Response (EDR) solution?
Answer: To monitor, detect, and respond to threats on individual devices
EDR solutions continuously monitor endpoint activities to detect, investigate, and respond to advanced threats in real time.
Which technology enforces policies that determine whether a device is allowed to connect to a corporate network?
Answer: Network Access Control (NAC)
Network Access Control (NAC) evaluates device health and identity before granting or denying network access.
What threat does Full Disk Encryption (FDE) primarily protect against?
Answer: Unauthorized data access when a device is physically lost or stolen
FDE renders all data on a device unreadable without proper authentication credentials, protecting it if the device is lost or stolen.
A Data Loss Prevention (DLP) solution primarily focuses on:
Answer: Preventing unauthorized transmission of sensitive data outside the organization
DLP monitors and controls data movements to prevent sensitive information from being exfiltrated or shared without authorization.
Which endpoint security technique detects unknown malware by analyzing suspicious behaviors rather than known signatures?
Answer: Heuristic and behavioral analysis
Heuristic and behavioral analysis identifies threats based on suspicious activities, enabling detection of zero-day and novel malware.
What distinguishes a Host-based Intrusion Prevention System (HIPS) from a HIDS?
Answer: HIPS actively blocks suspicious activity while HIDS only detects and alerts
HIPS actively prevents suspicious activities from executing on the host, whereas HIDS only detects and generates alerts.