Cisco Certified Support Technician (CCST) CybersecurityEndpoint SecurityEasy
Which of the following endpoint security technologies primarily focuses on detecting and preventing malicious software from executing on a device?
- AIntrusion Detection System (IDS)
- BData Loss Prevention (DLP)
- CAntivirus/Anti-malware
- DFirewall
Show answer & explanationAnswer & explanation
Correct answer: C. Antivirus/Anti-malware
Antivirus and anti-malware software are specifically designed to identify, quarantine, and remove malicious programs, making them the primary defense against such threats on endpoints.
Why the other options are wrong
- A. IDS monitors network or system activities for malicious activity or policy violations, but doesn't directly prevent malware execution on an endpoint.
- B. DLP solutions prevent sensitive data from leaving the organization's control, which is different from malware prevention.
- D. A firewall controls network traffic based on predefined rules, acting as a barrier between networks, not primarily preventing malware execution on the device itself.
Antivirus/Anti-malware
Software designed to detect, prevent, and remove malicious software, including viruses, worms, Trojans, and ransomware, from computer systems.
- Uses signature-based and heuristic-based detection.
- Protects against various forms of malware.
- Essential for endpoint security.
Memory trick: Each tool has a specific job to guard the endpoint.