1 Endpoint Security Fundamentals Free Online FlashCards

What is an endpoint?

An endpoint is a device that connects to a network or handles information, such as a laptop, phone, desktop, or server.

What is defense in depth?

Defense in depth uses multiple safeguards because no single control is perfect. For example, firewalls, anti-malware tools, and least-privilege permissions help limit different risks.

How do authentication and authorization differ?

Authentication checks who or what is requesting access; authorization determines what that authenticated identity is allowed to do.

What does multifactor authentication add to sign-in?

Multifactor authentication requires more than one kind of proof, such as a password plus an authenticator-app prompt or security key. It makes account takeover harder if a password is stolen.

What is malware?

Malware is software intended to perform unauthorized, harmful actions. Examples include ransomware, spyware, and Trojans.

Why should endpoint software be kept updated?

Unpatched software may contain known weaknesses that attackers can exploit. Operating systems, browsers, applications, and security tools all need updates.

Which account should you use for everyday work?

Use a standard account for everyday work and reserve administrator access for trusted, necessary maintenance. This limits what a malicious program can do if it runs.

How do encryption and a screen lock protect a lost device differently?

Encryption helps protect stored data if a device is lost, while a screen lock helps prevent casual access. Neither one removes malware.

What should you do first if you suspect a device is compromised?

If safe and consistent with procedure, disconnect the device from networks to limit further communication, then contact IT or the designated security contact through a trusted channel.

What does the principle of least privilege require?

Least privilege gives each user or process only the permissions needed for its task. This can limit the damage a malicious program can cause if it runs.

How do phishing and social engineering put endpoints at risk?

Phishing and social engineering use deceptive messages, calls, or websites to persuade people to reveal credentials, open attachments, or run files.

How can removing unused software reduce endpoint risk?

Uninstall unused applications and disable unnecessary services or sharing features to reduce ways a device could be misused or attacked.