(ISC)2 Certified in Cybersecurity Practice Exam

Which tool is designed to monitor local devices to mitigate threats from hostile software?

1. NIDS (network-based intrusion-detection systems)

2. Anti-malware

3. DLP (data loss prevention)

4. Firewall

The correct answer is: Anti-malware

The chosen answer, anti-malware, accurately describes a tool specifically designed to monitor local devices for the purpose of detecting and mitigating threats from hostile software. Anti-malware software functions by continuously scanning files and processes on a device, identifying and neutralizing threats such as viruses, worms, and trojans. This proactive protection is crucial for maintaining the integrity and security of local systems, ensuring that malicious software does not compromise sensitive information or disrupt normal operations. When evaluating the other tools mentioned, network-based intrusion-detection systems (NIDS) focus primarily on monitoring network traffic for signs of potential threats, rather than directly protecting individual devices. DLP (data loss prevention) focuses on preventing unauthorized access or transfer of sensitive information, which, while important, does not directly address the mitigation of hostile software threats. Firewalls act as a barrier between trusted and untrusted networks, controlling incoming and outgoing traffic, but they do not scrutinize local device behavior for malicious software. Thus, while all these tools contribute to cybersecurity in different capacities, anti-malware stands out specifically for its role in local device protection against hostile software.