Cisco Certified Support Technician (CCST) CybersecurityEndpoint SecurityMedium
A company is implementing a new policy for all employee workstations that requires regular scans for misconfigurations, missing patches, and known security vulnerabilities. The goal is to proactively identify and address weaknesses before they can be exploited. Which endpoint security technology or process is being described?
- AAntivirus/Anti-malware
- BData Loss Prevention (DLP)
- CVulnerability Management
- DEndpoint Detection and Response (EDR)
Show answer & explanationAnswer & explanation
Correct answer: C. Vulnerability Management
Vulnerability management is the continuous process of identifying, assessing, prioritizing, and remediating security weaknesses (vulnerabilities) in systems and applications, including misconfigurations and missing patches.
Why the other options are wrong
- A. Antivirus protects against malware, not general system vulnerabilities or misconfigurations.
- B. DLP prevents data exfiltration, unrelated to identifying system weaknesses.
- D. EDR focuses on detecting and responding to active threats, not proactive vulnerability identification.
Vulnerability Management
The cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating vulnerabilities in systems and applications.
- Proactive approach to security.
- Includes scanning, assessment, and remediation.
- Addresses misconfigurations and missing patches.
Memory trick: Vulnerability Management: Find and fix the security holes before attackers do.