Cisco Certified Support Technician (CCST) CybersecurityEndpoint SecurityMedium
A company is concerned about employees installing unapproved software on their work laptops, potentially introducing vulnerabilities or licensing issues. They want to implement a solution that limits what applications can be executed. Which endpoint security concept addresses this concern?
- AMobile Device Management (MDM)
- BVulnerability Management
- CApplication Whitelisting
- DEndpoint Detection and Response (EDR)
Show answer & explanationAnswer & explanation
Correct answer: C. Application Whitelisting
Application whitelisting is a security measure that permits only an approved list of applications to run on a system. This directly prevents the execution of unapproved or potentially malicious software.
Why the other options are wrong
- A. MDM manages mobile devices, not typically desktop or laptop applications in this context.
- B. Vulnerability management identifies and remediates weaknesses but doesn't prevent users from installing unapproved programs.
- D. EDR detects and responds to threats but doesn't inherently prevent the installation of unapproved software unless it's malicious.
Application Whitelisting
A security strategy that allows only explicitly approved applications to execute on a system, blocking all others by default.
- Enhances security by preventing unauthorized software.
- Can reduce attack surface and malware infections.
- Requires careful management of the approved application list.
Memory trick: Whitelist says, 'Only you can play here!'