Which Kind of Endpoint Control?

About this interactive

When you secure an endpoint, the measures fall into four groups. Built-in technologies are already there when the device arrives, needing little from you: a TPM chip, a secure enclave, a self-encrypting drive, ASLR in the operating system. Configuration is how you set the device up: turning off unused services, changing default passwords, removing extra software, closing ports, fixing the boot order. Protection is defensive software you install: a host firewall, anti-malware, host intrusion prevention, EDR, application control. Maintenance and monitoring is the ongoing work: patching, pushing policy, logging and watching for trouble. The module focuses on the first three and treats maintenance and monitoring more lightly, because another course covers it in depth. Hardening is needed at all because vendors ship devices to work out of the box, not to be secure. To sort a card, ask whether the measure came with the device, changes its setup, is software you added, or is ongoing upkeep.

What you'll learn

Sort an endpoint security measure into one of four categories: a built-in technology, a configuration choice, added protection, or maintenance and monitoring
Explain why a hardening process is needed because devices arrive set up for ease of use rather than for security

Aligned to

CompTIA Security+

4.1 Given a scenario, apply common security techniques to computing resources.

2.5 Explain the purpose of mitigation techniques used to secure the enterprise.

Key terms

Endpoint Security: The category of software that protects individual devices — laptops, desktops, servers, and mobile devices — from malware, intrusion, and data loss, typically combining antivirus, host firewall, and detection and response capabilities.
Hardening: The process of securing a system by reducing its attack surface — disabling unnecessary services, applying configuration best practices, removing default credentials, and keeping software patched. Hardened systems offer fewer opportunities for exploitation.
Host-based Firewall: A software firewall installed directly on an individual computer that monitors and controls network traffic to and from that specific host. Host-based firewalls provide a layer of defense that persists even when a device leaves the corporate network.
Anti-Malware: Software designed to detect, prevent, and remove the full spectrum of malicious software threats from a system, encompassing viruses and all other malware types.
Patch Management: The process of acquiring, testing, and installing software updates to fix vulnerabilities and improve functionality.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →