100-160 Question 122
Select 3A security analyst is tasked with assessing the security posture of multiple endpoints in a corporate network. Which of the following tools would be appropriate for gathering information such as active processes, installed software, and potential vulnerabilities on these endpoints?
- A
Endpoint Detection and Response (EDR) tools
- B
Network Intrusion Detection System (NIDS)
- C
Vulnerability assessment scanners
- D
System Information tools like msinfo32
- E
Firewall configuration management tools
Show answer and explanation
Correct answers: A, C, D
Explanation
To properly assess the security posture of endpoints, tools such as Endpoint Detection and Response (EDR), vulnerability assessment scanners, and system information utilities are highly effective. These tools provide detailed insights into endpoint activity, configuration, and vulnerabilities. Network intrusion detection systems and firewall management tools, while important in overall cybersecurity, do not gather endpoint-specific security assessment data.
- A. Correct.
Endpoint Detection and Response (EDR) tools are specifically designed to monitor and collect endpoint activity data, including information about active processes and potential threats, making them highly relevant for security assessments.
- B. Incorrect.
Network Intrusion Detection Systems (NIDS) focus on monitoring network traffic for malicious activity and are not used to gather security assessment information from individual endpoints.
- C. Correct.
Vulnerability assessment scanners can identify security weaknesses and misconfigurations on endpoints, making them an appropriate tool for gathering security assessment data.
- D. Correct.
System Information tools like msinfo32 provide detailed data about the hardware and software configuration of an endpoint, which can be useful during a security assessment.
- E. Incorrect.
Firewall configuration management tools are used to configure and manage firewalls, not to assess the security posture or gather endpoint-specific information.