100-160 Question 134
Select 4As a cybersecurity technician, you receive an alert that a company's endpoint devices are not meeting the organization's security policies. Which of the following steps should you take to verify compliance with the security policies and standards?
- A
Check that endpoint devices have the latest antivirus and antimalware signatures installed.
- B
Verify that devices are connected to the corporate network using a secure, encrypted VPN.
- C
Ensure that all endpoint devices are using the default factory settings for simplicity.
- D
Confirm that all operating systems and third-party software are updated with the latest security patches.
- E
Review access logs to confirm that endpoints are only communicating with approved systems.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Verifying endpoint security requires a comprehensive review to ensure compliance with security policies. This includes checking for updated antivirus signatures, secure connections, system patching, and reviewing logs for unauthorized activities. Default factory settings are insecure and should not be relied upon for meeting security standards.
- A. Correct.
This is correct. Ensuring that antivirus and antimalware tools are up-to-date is critical to meeting security standards.
- B. Correct.
This is correct. Verifying that endpoints use secure communication methods like VPNs ensures data is protected during transmission.
- C. Incorrect.
This is incorrect. Using default factory settings often leaves devices vulnerable to attacks as these settings are not optimized for security.
- D. Correct.
This is correct. Applying the latest security patches helps mitigate vulnerabilities in operating systems and applications.
- E. Correct.
This is correct. Reviewing access logs ensures that endpoint devices are interacting only with approved systems and not unauthorized ones.