Chapter 3 of 8 · EC-Council 312-38
Endpoint Protection
Windows and Linux hardening, enterprise mobile security, Android, iOS and IoT security, worth 20 percent.
- 9topics
- 36 minfast track
- 20%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Windows Security Components, Features and BaselinesLearn how Windows security works: LSASS, SAM, access tokens, Defender, BitLocker, UAC, Credential Guard and baselines from CIS…4 min
- 2Windows Accounts, Passwords, Patching and AccessManage Windows accounts and passwords, patch with WSUS and deployment rings, and control user access with least privilege and key…4 min
- 3Windows Hardening, Active Directory and Network ServicesHarden Windows by removing services and legacy protocols, follow Active Directory best practices and secure SMB, RDP, DNS, LDAP…4 min
- 4Linux Security Concerns, Patching and HardeningUnderstand Linux security concerns, secure installation and patching with package managers, and hardening with permissions…4 min
- 5Linux Access, Remote Security and Security ToolsControl Linux users, passwords, sudo and PAM, secure SSH and remote access, and know Linux security tools from auditd and Lynis…4 min
- 6Enterprise Mobile Policies, Risks and ManagementCompare BYOD, COPE and CYOD mobile policies, their risks and guidelines, and the MDM, MAM and UEM solutions that enforce…4 min
- 7Mobile Platform Guidelines for Android and iOSApply mobile security guidelines with the Android and iOS security models, app permissions, Play Protect, Find My, updates and…4 min
- 8IoT Devices, Ecosystem and Security RisksUnderstand IoT devices and application areas, the IoT ecosystem and architecture, communication models and protocols, and the…4 min
- 9IoT Security Measures, Tools and StandardsSecure IoT environments with segmentation, device identity, encryption and updates, plus IoT security tools, best practices and…4 min
About this chapter
What this chapter covers
Endpoint Protection is 20% of the EC-Council CND 312-38 exam, the largest single domain. It covers securing Windows and Linux systems, managing mobile devices under enterprise usage policies, securing Android and iOS, and protecting Internet of Things (IoT) devices and environments.
Questions are single-answer multiple choice. They are often "Which of the following" items or short named scenarios, and they test whether you can choose and operate the right defense, for example the right Windows event ID, Linux file, mobile management solution or IoT standard.
It has 30 outline topics, grouped into nine pages.
How the topics fit together
The chapter moves from the most common endpoint operating systems to mobile devices and then to constrained IoT devices.
- Windows and Linux pages teach built-in components, account and patch management, and hardening to a baseline.
- Mobile pages teach policy models, management tools and platform specific controls.
- IoT pages teach the ecosystem, the risks and the measures and standards that address them.
The same defender habits repeat on every platform: least privilege, patch quickly, remove what is not needed, encrypt, and log. When unsure, pick the answer built on those.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try to name the best control for each short scenario before reading the answer. The exam often describes a risk and asks which control or setting fits.
Ready for more practice?
The full EC-Council 312-38 question bank has 800 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by EC-Council. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.