CCST Endpoint Operating System Security 3

Question 1

What is the role of patch management in endpoint security?

Accepted Answer

To systematically apply security updates to fix known vulnerabilities

Answer

Patch management regularly applies security updates to fix vulnerabilities that attackers could exploit.

Question 2

Which technology uses hardware to securely store cryptographic keys and verify system integrity at boot?

Accepted Answer

TPM (Trusted Platform Module)

Answer

TPM stores cryptographic keys and measures the boot process to verify system integrity before the OS loads.

Question 3

What security risk do local administrator accounts pose on endpoints?

Accepted Answer

They allow unrestricted access that malware can exploit for full system compromise

Answer

Local admin accounts have full system access; if compromised, an attacker gains complete control.

Question 4

What is Secure Boot and what does it protect against?

Accepted Answer

A UEFI feature that verifies digital signatures of boot software to prevent unauthorized code

Answer

Secure Boot checks digital signatures of bootloader, kernel, and drivers during startup, preventing bootkits and rootkits.

Question 5

Why should USB port access be controlled on enterprise endpoints?

Accepted Answer

Uncontrolled USB access allows data exfiltration, malware introduction, and unauthorized devices

Answer

Uncontrolled USB ports enable data theft, malware infection, and rogue device attacks.

(CCST) Cisco Certified Support Technician Practice Test