Question

When assessing device posture, which technical data point is gathered to verify if an endpoint is safe to connect to the internal network?

Accepted Answer

The primary technical data point gathered to verify endpoint safety during a posture assessment is the compliance state of the device, which is validated through the collection of specific telemetry data such as operating system patch levels, active antivirus status, and disk encryption status. Device posture refers to the security health configuration of an endpoint, which is the physical computer, laptop, or mobile device attempting to connect to a network. The assessment process involves an agent or a scan comparing the current configuration of the device against a predefined set of organizational security policies. For example, the system checks if the Windows or macOS operating system has installed the most recent security updates to prevent known vulnerabilities, whether the antivirus software is running and updated with the latest threat definitions, and if the hard drive is encrypted to prevent data theft if the device is stolen. If these data points match the required security policy, the device is considered compliant and safe, allowing it access to the internal network. If the device fails to meet any of these criteria, the network access control system denies access or redirects the user to a remediation portal where they must update their software before they are permitted to join the network.

Home → All Courses → Engineering and Technology Courses → Zero Trust Security Architecture → Flashcard

When assessing device posture, which technical data point is gathered to verify if an endpoint is safe to connect to the internal network?