Section 18: Endpoint Security Controls

Question 1

Hot Fix

Answer 1

o Solves a security issue and should be applied immediately after being tested in a
lab environment

Question 2

Update

Answer 2

o Provides a system with additional functionality, but does not usually provide any patching of security-related issues

Question 3

Service Pack

Answer 3

Several released security patches bundled together

Question 4

Address Space Layout Randomization (ASLR)

Answer 4

Provides buffer overflow prevention by making it difficult to guess the location of executable files stored in the RAM

Question 5

Local Drive Encryption

Answer 5

Local Drive Encryption
▪ Protects the contents of the storage device when the operating system is not running

● Examples
o MS Windows – BitLocker
o Linux – Cryptsetup
o OS X FileVault

Question 6

Trusted Platform Module (TPM)

Answer 6

▪ Stores and protects both symmetric and asymmetric encryption keys, hashes, and digital certificates