nerdexam
CompTIA

CAS-003 · Question #946

An extensive third-party audit reveals a number of weaknesses m a company's endpoint security posture. The most significant issues are as follows: Which of the following endpoint security solutions…

The correct answer is B. Comprehensive data leakage prevention capabilities machine-learning-based advanced malware. The audit identified two major risk categories: data exfiltration and advanced/unknown malware. Option B addresses both: Data Loss Prevention (DLP) directly mitigates the risk of sensitive data leaving the organization (intentionally or accidentally), while…

Enterprise Security Architecture

Question

An extensive third-party audit reveals a number of weaknesses m a company's endpoint security posture. The most significant issues are as follows:

Which of the following endpoint security solutions mitigate the GREATEST amount of risk?

Options

  • AIntegrated patch management capabilities an integrated desktop firewall intrusion prevention
  • BComprehensive data leakage prevention capabilities machine-learning-based advanced malware
  • CMachine-learning-based advanced malware prevention capabilities. an integrated desktop firewall,
  • DRemovable media management capabilities signature-based anti-malware capabilities we-

How the community answered

(57 responses)
  • A
    9% (5)
  • B
    70% (40)
  • C
    4% (2)
  • D
    18% (10)

Explanation

The audit identified two major risk categories: data exfiltration and advanced/unknown malware. Option B addresses both: Data Loss Prevention (DLP) directly mitigates the risk of sensitive data leaving the organization (intentionally or accidentally), while machine-learning-based (behavioral) malware prevention catches zero-day and advanced threats that signature-based tools miss. Together, these two controls address the broadest and most critical risk surface. Option A focuses on patching and network-layer protection but misses data leakage. Option C omits DLP. Option D uses only signature-based detection, which is ineffective against advanced or novel malware.

Topics

#endpoint security#DLP#advanced malware protection#machine learning

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice