CompTIA CASP+ (CAS-004) — Question 445

A security manager is creating a standard configuration across all endpoints that handle sensitive data. Which of the following techniques should be included in the standard configuration to ensure the endpoints are hardened?

Answer options

• A. Drive encryption
• B. Patch management
• C. Event logging
• D. Resource monitoring

Correct answer: A

Explanation

Drive encryption is essential for protecting sensitive data on endpoints by making it inaccessible without proper authentication. While patch management, event logging, and resource monitoring are important for overall security, they do not specifically harden the endpoints in the same way that drive encryption does.