CND Endpoint Security Management Quiz

1. What does UEBA (User and Entity Behavior Analytics) monitor on endpoints?

Anomalous user and system behavior patterns indicating threats

Employee break room usage

Office supply inventory

Parking lot occupancy

2. Which framework guides comprehensive endpoint security policy development?

NIST Cybersecurity Framework and CIS Controls

Social media marketing guidelines

Office furniture standards

Parking validation procedures

3. What is the primary goal of endpoint threat hunting?

Proactively search for signs of compromise and hidden threats

Delete all user files

Increase network latency

Disable security software

4. Which endpoint security log should be regularly monitored for threat detection?

System, application, and security event logs

Printer usage logs

Cafeteria badge swipes

Meeting room reservations

5. What is the function of a Host-Based Firewall on endpoints?

Control inbound and outbound traffic at the individual device level

Manage network routers remotely

Encrypt all email messages

Filter social media content

6. Which authentication method provides the strongest endpoint security?

Multi-factor authentication (MFA)

Username only

Security questions

Device MAC address

7. What does vulnerability scanning on endpoints help identify?

Security weaknesses and missing patches on systems

Employee productivity metrics

Network printer models

User phone numbers

8. Which tool is commonly used for patch management on endpoints?

Software update servers and patch deployment systems

Network packet analyzers

Email clients

Web browsers

9. What is the primary purpose of endpoint encryption?

Protect data at rest and in transit from unauthorized access

Increase network bandwidth

Reduce storage capacity

Speed up user login times

10. Which endpoint security practice involves isolating infected devices from the network?

Quarantine and containment

Continuous data backup

Automatic software updates

User privilege escalation

11. What is the primary purpose of endpoint security management?

Protect devices and data from unauthorized access and malware

Monitor network bandwidth usage

Manage user login credentials only

Provide email filtering services

12. Which technique is used to detect zero-day malware on endpoints?

Behavioral analysis and sandboxing

Signature-based scanning only

Manual log review

IP blacklisting

13. What is the primary benefit of implementing Mobile Device Management (MDM)?

Centralized control and security policy enforcement on mobile devices

Increase mobile data plan costs

Reduce smartphone battery life

Disable all app functionality

14. Which endpoint security feature provides real-time file and process monitoring?

Behavioral analysis and heuristic detection

DHCP server configuration

Printer queue management

Email forwarding rules

15. What does DLP (Data Loss Prevention) on endpoints help protect against?

Unauthorized data exfiltration and sensitive information leakage

Physical theft of office equipment

Employee vacation scheduling conflicts

Network cable disconnections

16. Which of the following is a best practice for endpoint hardening?

Disable unnecessary services and apply security patches regularly

Enable all ports for flexibility

Use default passwords for faster setup

Disable all firewalls to improve performance

17. What is the main goal of host-based intrusion detection systems (HIDS)?

Monitor and detect suspicious activity on individual endpoints

Block all incoming network traffic

Encrypt all user passwords

Manage cloud storage quotas

18. Which security control involves restricting software execution to approved applications only?

Application whitelisting

Port forwarding

DNS filtering

VPN tunneling

19. What does EDR (Endpoint Detection and Response) primarily focus on?

Detecting and responding to advanced threats in real-time

Managing employee schedules

Controlling network printer access

Backing up cloud storage

20. Which of the following is a core component of endpoint protection platforms (EPP)?

Antivirus and anti-malware engines

Social media monitoring

Email server configuration

Router firmware updates