9. Which of the following mitigation techniques would a security analyst most likely use to avoid bloatware on devices?
Answer: B
Application allow list is the most effective mitigation technique to avoid bloatware on devices.
Utilizing an application allow list is a proactive measure that restricts the installation and execution of software on devices to only those applications that have been explicitly approved. This helps prevent the installation of unwanted bloatware, ensuring that only necessary and trusted applications are present.
A) Disabled ports/protocols
Disabling ports and protocols primarily focuses on network security and controlling data traffic rather than managing software installations. While it can enhance security by limiting access points, it does not directly address the issue of bloatware on devices.
B) Application allow list
An application allow list is a security measure that permits only specified applications to run on a device. By implementing this technique, security analysts can effectively prevent unauthorized software, including bloatware, from being installed or executed, making it the most relevant option for this scenario.
C) Default password changes
Changing default passwords is crucial for securing devices against unauthorized access but does not impact the presence of bloatware. This technique is focused on enhancing security at the access level rather than controlling the software that is installed on devices.
D) Access control permissions
While access control permissions are important for managing user rights and restricting access to certain functions or data within applications, they do not specifically prevent the installation of additional software like bloatware. This method addresses user privileges rather than the application environment itself.
Conclusion
The application allow list is definitively the correct choice as it directly targets the issue of unwanted software installations, such as bloatware, by allowing only pre-approved applications to run. Other options, while important in their own right, do not effectively mitigate the risk of bloatware on devices, making them less suitable for this specific concern.