Question

A security analyst is configuring a large number of new company-issued laptops. The analyst

received the following requirements:
* The devices will be used internationally by staff who travel extensively.
* Occasional personal use is acceptable due to the travel requirements.
* Users must be able to install and configure sanctioned programs and productivity suites.
* The devices must be encrypted
* The devices must be capable of operating in low-bandwidth environments.
Which of the following would provide the GREATEST benefit to the security posture of the devices?
A. Configuring an always-on VPN
B. Implementing application whitelisting
C. Requiring web traffic to pass through the on-premises content filter
D. Setting the antivirus DAT update schedule to weekly

Answer 1

Implementing application whitelisting offers the greatest security benefit for the laptops by allowing only pre-approved software, which minimizes the risk of malware infections.

Step-by-step explanation:

The question is asking which security measure would provide the greatest benefit to the security posture of laptops that will be used internationally, with allowance for personal use, and a requirement for encryption and operation in low-bandwidth environments. Among the options given, implementing application whitelisting would provide the greatest benefit to the security posture of the devices. Application whitelisting allows only pre-approved software to run on the systems, greatly reducing the risk of malicious software infections despite users having the ability to install and configure programs. While an always-on VPN, having web traffic pass through the on-premises content filter, and setting the antivirus DAT update schedule to weekly are beneficial, they do not offer the proactive security control that application whitelisting does. Furthermore, application whitelisting can function effectively even in low-bandwidth environments where updates and filters might struggle.