Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) · Cisco
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The two components that reduce the attack surface on an endpoint are: Secure boot: Secure boot is a process that ensures the integrity and authenticity of the firmware and operating system that are loaded on an endpoint device when it starts up. It helps prevent malicious code from being executed during the boot process, reducing the attack surface by ensuring only trusted software is run. Restricting USB ports: By restricting or disabling USB ports on an endpoint device, you can reduce the risk of malware being introduced through external devices like USB drives. This limits the attack surface by preventing unauthorized or potentially malicious USB devices from being connected to the endpoint. (full packet captures at the endpoint), (increased audit log levels), and (load balancing) are not directly related to reducing the attack surface on an endpoint.
A. secure boot D. restricting USB ports
The keyword here is "endpoint". The only two items related to endpoint is secure boot and USB port restriction.