Apprentice Practice Questions

Endpoint security focuses on protecting the individual device where users work, such as laptops, desktops, mobile devices, and other endpoint systems. Installing an anti-malware agent onto a user device is a direct endpoint security implementation method because the security control resides on the host and inspects files, processes, and system behavior for malicious activity. Downloading software onto a laptop to prevent spyware is also an endpoint-focused control because it protects the local device against malicious code designed to monitor activity, steal data, or weaken the operating environment. By contrast, deploying a firewall to prevent traffic from reaching an end user is primarily a network security control when placed at the network boundary. Enforcing north-south traffic policies is also network security because it governs traffic moving between internal users and the internet. Palo Alto Networks identifies endpoint security objectives and components such as security updates, antivirus, and host-based firewalls under the Endpoint Security domain. Reference: Cybersecurity Apprentice Datasheet, Endpoint Security 4.2 and 4.3.