CCST Endpoint Operating System Security 2

Question 1

What is the principle of least privilege in endpoint security?

Accepted Answer

Users should be granted only the minimum permissions needed for their job

Answer

Users should have no access to any resources

Answer

Administrators should have unlimited access

Answer

All users should share one admin account

Question 2

Which Windows feature controls whether applications can make changes to the operating system?

Accepted Answer

User Account Control (UAC)

Answer

Windows Defender

Answer

BitLocker

Answer

Windows Firewall

Question 3

What type of software monitors endpoint activity and detects threats in real time?

Accepted Answer

Endpoint Detection and Response (EDR)

Answer

VPN client

Answer

DHCP server

Answer

Load balancer

Question 4

Why is full disk encryption important for endpoint security?

Accepted Answer

It protects data if the device is lost or stolen by making it unreadable without the decryption key

Answer

It speeds up disk operations

Answer

It prevents malware installation

Answer

It backs up data to the cloud

Question 5

What is the purpose of application whitelisting on endpoints?

Accepted Answer

To allow only pre-approved applications to execute

Answer

To speed up application loading

Answer

To automatically update applications

Answer

To monitor application network usage

Question 6

What is a host-based firewall and how does it differ from a network firewall?

Accepted Answer

Runs on individual endpoints filtering per-device traffic while a network firewall protects the perimeter

Answer

Filters wireless only while network firewall filters wired

Answer

Blocks external threats while network blocks internal

Answer

Requires no configuration while network needs manual setup