100-160 Question 133
Select 3A cybersecurity team is tasked with verifying that all endpoint systems in the organization comply with the company's security policies and standards. Which of the following actions should they take to confirm compliance?
- A
Check that all endpoints have the latest operating system updates installed.
- B
Ensure that all endpoint devices are connected to a secure guest Wi-Fi network.
- C
Verify that endpoint devices have active and updated antivirus or endpoint protection software.
- D
Audit the endpoint devices to confirm they are not running unauthorized or prohibited applications.
- E
Require all endpoint users to change their passwords every 30 days regardless of policy.
Show answer and explanation
Correct answers: A, C, D
Explanation
To verify that endpoint systems meet security policies and standards, actions such as ensuring operating system updates, confirming active endpoint protection software, and auditing unauthorized applications directly align with maintaining system security and policy compliance. Other actions, such as connecting to a guest network or arbitrary password changes, do not directly address endpoint security compliance.
- A. Correct.
Ensuring that all endpoints have the latest operating system updates is critical for compliance with security policies as it reduces vulnerabilities from known exploits.
- B. Incorrect.
Connecting to a secure guest Wi-Fi network does not necessarily verify compliance with endpoint security policies and standards. It may improve network security but is unrelated to endpoint compliance checks.
- C. Correct.
Verifying that endpoint devices have active and updated antivirus or endpoint protection software is essential for meeting security policies and preventing malware or other threats.
- D. Correct.
Auditing endpoint devices for unauthorized or prohibited applications ensures compliance with security standards and prevents the use of software that might introduce risks.
- E. Incorrect.
Requiring all users to change their passwords every 30 days regardless of policy is not a valid action unless explicitly stated in the organization's security policy. Arbitrary password changes could reduce usability without clear benefits.