Cisco Certified Support Technician (CCST) CybersecurityEndpoint SecurityMedium
A recent audit revealed that several company laptops, when taken off-site, are not consistently enforcing strong password policies or updating their antivirus definitions. Which endpoint security best practice is most directly violated by this finding?
- APrinciple of Least Privilege
- BSecurity Awareness Training
- CRegular Patch Management
- DCentralized Management
Show answer & explanationAnswer & explanation
Correct answer: D. Centralized Management
The issue describes a lack of consistent policy enforcement and updates when devices are off-site, indicating a failure in centralized management to reach and control these endpoints effectively.
Why the other options are wrong
- A. Least Privilege concerns users having only necessary access, not policy enforcement for off-site devices.
- B. Security awareness training educates users, but the problem here is system enforcement, not user behavior.
- C. While related to updates, 'Regular Patch Management' is a component of a good security posture; the core issue of inconsistent enforcement points to a lack of centralized management capabilities for off-site devices.
Centralized Endpoint Management
The practice of managing and securing all endpoints within an organization from a single, central platform, ensuring consistent policy application and visibility.
- Ensures uniform security posture across all devices.
- Facilitates remote patching and configuration.
- Crucial for mobile and off-site devices.
Memory trick: Good practices keep endpoints safe and sound, even on the go.