Exam 200-201 topic 1 question 81 discussion

The two components that reduce the attack surface on an endpoint are: Secure boot: Secure boot is a process that ensures the integrity and authenticity of the firmware and operating system that are loaded on an endpoint device when it starts up. It helps prevent malicious code from being executed during the boot process, reducing the attack surface by ensuring only trusted software is run. Restricting USB ports: By restricting or disabling USB ports on an endpoint device, you can reduce the risk of malware being introduced through external devices like USB drives. This limits the attack surface by preventing unauthorized or potentially malicious USB devices from being connected to the endpoint. (full packet captures at the endpoint), (increased audit log levels), and (load balancing) are not directly related to reducing the attack surface on an endpoint.

A. secure boot D. restricting USB ports

The keyword here is "endpoint". The only two items related to endpoint is secure boot and USB port restriction.