6. Which of the following mitigation techniques would a security analyst most likely use to avoid bloatware on devices?
Answer: B
Application allow list is the most effective mitigation technique to avoid bloatware on devices.
Using an application allow list enables a security analyst to explicitly permit only certain applications to be installed and run on devices, effectively preventing the installation of unwanted bloatware.
A) Disabled ports/protocols
Disabling ports and protocols is primarily a network security measure aimed at protecting against unauthorized access and attacks. While it can contribute to overall security, it does not directly address the issue of bloatware installation on devices.
B) Application allow list
An application allow list is a proactive strategy that helps control which applications can be installed and executed on a device. By permitting only trusted applications, this technique minimizes the risk of bloatware, ensuring that users only have access to necessary and safe software.
C) Default password changes
Changing default passwords is a critical security measure that helps prevent unauthorized access to devices. However, it does not prevent bloatware from being installed; it focuses on securing account access rather than application management.
D) Access control permissions
Access control permissions regulate user access to resources and can enhance security within an environment. However, while they may limit what users can do with installed applications, they do not directly prevent the installation of bloatware itself.
Conclusion
The application allow list stands out as the definitive method for preventing bloatware, as it directly controls the software that can be installed on devices. In contrast, the other options, while important for overall security practices, do not specifically address the bloatware issue, making them less effective in this context.