350-701 · Question #530
What is a characteristic of an EDR solution and not of an EPP solution?
The correct answer is B. retrospective analysis. EDR focuses primarily on detecting advanced threats, those designed to evade front-line defenses and have successfully entered the environment. An EPP focuses solely on prevention at the perimeter. It is difficult, if not impossible, for an EPP to block 100 percent of threats…
Question
What is a characteristic of an EDR solution and not of an EPP solution?
Options
- Astops all ransomware attacks
- Bretrospective analysis
- Cdecrypts SSL traffic for better visibility
- Dperforms signature-based detection
How the community answered
(21 responses)- B90% (19)
- C5% (1)
- D5% (1)
Explanation
EDR focuses primarily on detecting advanced threats, those designed to evade front-line defenses and have successfully entered the environment. An EPP focuses solely on prevention at the perimeter. It is difficult, if not impossible, for an EPP to block 100 percent of threats. A holistic endpoint security solution deploys both EPP and EDR capabilities. If the EDR has retrospective capabilities, this actionable data should be used to automatically remediate systems to their state prior to infection.
Topics
Community Discussion
No community discussion yet for this question.