CCST Endpoint Operating System Security 3

Question 1

What is the role of patch management in endpoint security?

Accepted Answer

To systematically apply security updates to fix known vulnerabilities

Answer

To install new features

Answer

To replace hardware

Answer

To create OS backups

Question 2

Which technology uses hardware to securely store cryptographic keys and verify system integrity at boot?

Accepted Answer

TPM (Trusted Platform Module)

Answer

BIOS

Answer

GPU

Answer

NIC

Question 3

What security risk do local administrator accounts pose on endpoints?

Accepted Answer

They allow unrestricted access that malware can exploit for full system compromise

Answer

They use too much disk space

Answer

They slow down connectivity

Answer

They prevent software installations

Question 4

What is Secure Boot and what does it protect against?

Accepted Answer

A UEFI feature that verifies digital signatures of boot software to prevent unauthorized code

Answer

A fast startup mode

Answer

A network boot protocol

Answer

A BIOS encryption setting

Question 5

Why should USB port access be controlled on enterprise endpoints?

Accepted Answer

Uncontrolled USB access allows data exfiltration, malware introduction, and unauthorized devices

Answer

USB ports consume too much power

Answer

USB devices are slower than network

Answer

USB ports interfere with Wi-Fi

Question 6

What is the function of a host-based intrusion detection system (HIDS)?

Accepted Answer

To monitor system activities and file changes to detect intrusion or policy violations

Answer

To encrypt all files

Answer

To block all incoming connections

Answer

To automatically install updates