Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 302

Which two components reduce the attack surface on an endpoint? (Choose two.)

Answer options

• A. secure boot
• B. load balancing
• C. increased audit log levels
• D. restricting USB ports
• E. full packet captures at the endpoint

Correct answer: A, D

Explanation

Secure boot ensures that only trusted software is loaded during the startup process, preventing malicious code from executing. Restricting USB ports reduces the risk of unauthorized devices being connected, thereby limiting potential attack vectors. The other options either do not directly impact the attack surface or are more related to performance and monitoring rather than security.