Exam CA1-005 topic 1 question 4 discussion

MDM (A) can enforce endpoint security settings (e.g., full-disk encryption, host-based firewall, password policies) and manage application allow lists, addressing the bulk of the OS benchmark requirements at the device level. SCAP (D) automates compliance checks against the benchmark, verifying configurations like encryption, firewalls, and password policies to ensure continuous adherence.

It’s definitely MDM and SCAP

As the prior user states, MDM provides FDE, a host-based firewall, password policies, and application allowing. SCAP fulfills the OS benchmark requirements they are intending to do.

MDM (Mobile Device Management) can enforce full disk encryption, host-based firewalls, password policies, and application allow listing across devices. SASE (Secure Access Service Edge) integrates Zero Trust network access and other security functions, making it ideal for secure application access. While F. HIDS (Host-based Intrusion Detection System) is critical for monitoring and detecting suspicious activities, it doesn't directly address all the configurations specified in the benchmark, such as Zero Trust application access or application allow listing.