ExamGecko
Question list
Search
Search

Question 217 - 350-701 discussion

Report
Export

In which situation should an Endpoint Detection and Response solution be chosen versus an Endpoint Protection Platform?

A.

when there is a need for traditional anti-malware detection

Answers
A.

when there is a need for traditional anti-malware detection

B.

when there is no need to have the solution centrally managed

Answers
B.

when there is no need to have the solution centrally managed

C.

when there is no firewall on the network

Answers
C.

when there is no firewall on the network

D.

when there is a need to have more advanced detection capabilities

Answers
D.

when there is a need to have more advanced detection capabilities

Suggested answer: D

Explanation:

Endpoint protection platforms (EPP) prevent endpoint security threats like known and unknown malware.

Endpoint detection and response (EDR) solutions can detect and respond to threats that your EPP and other security tools did not catch.

EDR and EPP have similar goals but are designed to fulfill different purposes. EPP is designed to provide device-level protection by identifying malicious files, detecting potentially malicious activity, and providing tools for incident investigation and response.

The preventative nature of EPP complements proactive EDR. EPP acts as the first line of defense, filtering out attacks that can be detected by the organization's deployed security solutions. EDR acts as a second layer of protection, enabling security analysts to perform threat hunting and identify more subtle threats to the endpoint.

Effective endpoint defense requires a solution that integrates the capabilities of both EDR and EPP to provide protection against cyber threats without overwhelming an organization's security team.

asked 10/10/2024
Ankur Patel
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first