CCST - Cisco Certified Support Technician Endpoint Operating System Security Questions and Answers

Question 1

A user's computer is running unusually slow, and they are seeing frequent, unwanted pop-up advertisements.
A support technician suspects a malware infection.
What is the most appropriate FIRST action to take?

Accepted Answer

Update the antivirus definitions and perform a full system scan.

Answer

Disconnect the computer from the network to prevent potential spread.

Answer

Reinstall the operating system to ensure the malware is completely removed.

Answer

Check for and install the latest operating system security patches.

Question 2

What is the primary function of a host-based firewall on an end-user's computer?

Accepted Answer

To inspect and filter network traffic entering and leaving that specific device.

Answer

To scan files and emails for known virus signatures.

Answer

To encrypt all data stored on the hard drive to prevent theft.

Answer

To block access to malicious websites based on their URL.

Question 3

Which of the following is the MOST critical reason for an organization to consistently apply operating system security patches?

Accepted Answer

To remediate known vulnerabilities that could be exploited by attackers.

Answer

To add new features and improve the user interface.

Answer

To resolve software compatibility issues with third-party applications.

Answer

To improve overall system stability and performance.

Question 4

A company enforces a policy where employees use standard user accounts for daily tasks. When they need to install new software, they are prompted to enter administrator credentials. This practice is a direct implementation of which security principle?

Accepted Answer

Principle of Least Privilege

Answer

Defense in Depth

Answer

Data Encryption

Answer

Security through Obscurity

Question 5

In the context of endpoint operating system security, what does the term 'hardening' primarily refer to?

Accepted Answer

Reducing the system's attack surface by disabling unnecessary services and features.

Answer

Physically securing a computer to a desk with a cable lock.

Answer

Encrypting the entire hard drive to prevent data theft if the device is lost.

Answer

Updating antivirus software with the latest malware definitions.

Question 6

A security analyst requires a solution that goes beyond traditional signature-based antivirus. The solution must provide continuous monitoring of endpoint activities, detect suspicious behavior patterns, and offer tools for threat investigation and remediation. Which type of security solution BEST fits this requirement?

Accepted Answer

Endpoint Detection and Response (EDR)

Answer

Network-based Firewall

Answer

Full Disk Encryption (FDE)

Answer

Host-based Intrusion Prevention System (HIPS)

A user's computer is running unusually slow, and they are seeing frequent, unwanted pop-up advertisements.A support technician suspects a malware infection.What is the most appropriate FIRST action to take?

A user's computer is running unusually slow, and they are seeing frequent, unwanted pop-up advertisements.
A support technician suspects a malware infection.
What is the most appropriate FIRST action to take?