Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 17 results · Page 13 for “endpoint”.

Mini-lessons

SecOT+ · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

Security+ · Threats, Vulnerabilities, and Mitigations

Zero-day means the vendor has had zero days to fix it

…ating controls: segmentation, application allow lists, endpoint detection, and virtual patching at a web application firewall. Do not confuse it with legacy or end-of-life software, where fi…

Security+ · Security Operations

SIEM collects and correlates; SOAR acts on it

← PreviousPage 13

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

A SIEM gathers logs from firewalls, servers, endpoints and identity systems, normalises them, and correlates events into alerts, giving analysts a single console and long-term search. SOAR s…

THM-SAL1 · Forensic analysis and timelines

Forensic analysis and timelines

…with the provider's current objectives. Worked example Endpoint logs use local time and proxy logs use UTC. An apparent download occurs before its DNS lookup. What should the investigator do…

THM-SAL1 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

THM-SAL1 · Traffic analysis

Read a conversation in context

…quests, responses, retransmissions and resets. Compare endpoints, protocols and timestamps before drawing conclusions. Missing packets may reflect capture limitations, and encrypted payloads…

THM-SAL2 · Forensic analysis and timelines

Forensic analysis and timelines

…with the provider's current objectives. Worked example Endpoint logs use local time and proxy logs use UTC. An apparent download occurs before its DNS lookup. What should the investigator do…

THM-SAL2 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

THM-SAL2 · Traffic analysis

Read a conversation in context

…quests, responses, retransmissions and resets. Compare endpoints, protocols and timestamps before drawing conclusions. Missing packets may reflect capture limitations, and encrypted payloads…

VCAP-VCF-VKS · Kubernetes networking

Services find Pods through selectors

…vides a stable way to reach a changing set of workload endpoints. Its selector must match the intended Pods, and those Pods need to be ready for normal traffic. Inspect endpoints, ports, DNS…

WG-ESE · Security monitoring

An alert is a starting point for investigation

A detection rule identifies behavior worth examining, not a final verdict. Establish the affected identity, asset, time and activity, then correlate independent records. Compare the behavior…

WG-ESE · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

WG-ESE · MSP tenant boundaries

Tenant boundaries in MSP consoles

Check both customer scope and role permissions before performing a task. Parent policies may flow to child tenants or devices, while supported overrides change effective configuration. Inspe…

WG-ESE · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

eCIR · Forensic analysis and timelines

Forensic analysis and timelines

…with the provider's current objectives. Worked example Endpoint logs use local time and proxy logs use UTC. An apparent download occurs before its DNS lookup. What should the investigator do…

eCIR · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

eCIR · Traffic analysis

Read a conversation in context

…quests, responses, retransmissions and resets. Compare endpoints, protocols and timestamps before drawing conclusions. Missing packets may reflect capture limitations, and encrypted payloads…