Endpoint Operating System Security Flashcards
6 cards from real CCST practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Endpoint Operating System Security flashcards as text
What is the principle of least privilege in endpoint security?
Answer: Users should be granted only the minimum permissions needed for their job
Least privilege means users and processes only get the minimum access needed, reducing damage from compromised accounts.
Which Windows feature controls whether applications can make changes to the operating system?
Answer: User Account Control (UAC)
UAC prompts for confirmation before allowing applications to make changes requiring elevated privileges.
What type of software monitors endpoint activity and detects threats in real time?
Answer: Endpoint Detection and Response (EDR)
EDR solutions continuously monitor endpoints, detect suspicious behavior, and provide automated response capabilities.
Why is full disk encryption important for endpoint security?
Answer: It protects data if the device is lost or stolen by making it unreadable without the decryption key
Full disk encryption ensures all data is unreadable without proper authentication if the device is lost or stolen.
What is the purpose of application whitelisting on endpoints?
Answer: To allow only pre-approved applications to execute
Application whitelisting permits only approved applications to run, blocking all unauthorized software including unknown malware.
What is a host-based firewall and how does it differ from a network firewall?
Answer: Runs on individual endpoints filtering per-device traffic while a network firewall protects the perimeter
Host-based firewalls control traffic per-device; network firewalls protect the network boundary.