200-201 Question #45: Real Exam Question with Answer & Explanation

The correct answer is A. secure boot D. restricting USB ports. Secure boot: This is a security feature that ensures the integrity of the boot process by checking the digital signature of each component of the boot software to ensure they are trusted and haven't been tampered with by malicious software. Restricting USB ports: Disabling or res

Submitted by luis.pe· Mar 6, 2026Host-Based Analysis

Question

Which two components reduce the attack surface on an endpoint? (Choose two.)

Options

Asecure boot
Bload balancing
Cincreased audit log levels
Drestricting USB ports
Efull packet captures at the endpoint

Explanation

Secure boot: This is a security feature that ensures the integrity of the boot process by checking the digital signature of each component of the boot software to ensure they are trusted and haven't been tampered with by malicious software. Restricting USB ports: Disabling or restricting the use of USB ports on an endpoint device helps prevent unauthorized access or the introduction of malicious code through USB devices. This restriction reduces the potential attack vectors available to threat actors.

Topics

#attack surface reduction#endpoint security#secure boot#USB security

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice