CND CND Endpoint Security & Hardening

Question 1

What is the primary goal of OS hardening in a network defender's role?

Accepted Answer

Reduce the attack surface by disabling unnecessary services and features

Answer

Increase system performance

Answer

Enable remote desktop on all workstations

Answer

Install the latest productivity software

Question 2

Which security benchmark is widely used as a baseline for endpoint hardening configurations?

Accepted Answer

CIS Benchmarks

Answer

OWASP Top 10

Answer

MITRE ATT&CK

Answer

CVE Dictionary

Question 3

What is the purpose of application whitelisting on endpoints?

Accepted Answer

Permit only pre-approved applications to execute, blocking all others

Answer

Allow any application to run if it has a valid digital signature

Answer

Scan applications for viruses before launch

Answer

Automatically update all installed applications

Question 4

Which Windows feature uses virtualization to protect the integrity of the OS kernel from rootkits?

Accepted Answer

Virtualization-Based Security (VBS) / Hypervisor-Protected Code Integrity (HVCI)

Answer

BitLocker

Answer

Credential Guard

Answer

Windows Defender Firewall

Question 5

What does EDR (Endpoint Detection and Response) provide beyond traditional antivirus?

Accepted Answer

Continuous behavioral monitoring, threat hunting, and incident response capabilities

Answer

Only signature-based malware scanning

Answer

Firewall rule management

Answer

Patch deployment across endpoints

Question 6

What is the security purpose of disabling USB ports on corporate endpoints?

Accepted Answer

Prevent data exfiltration and introduction of malware via removable media

Answer

Improve system boot speed

Answer

Reduce power consumption

Answer

Improve keyboard and mouse performance