nerdexam
Cisco

350-701 · Question #720

What is capability of EPP compared to EDR?

The correct answer is D. EDR protects against malware that has already entered the environment, and EPP focuses on. Endpoint Protection Platforms (EPP) focus on preventing malware and threats at the endpoint before they execute, while Endpoint Detection and Response (EDR) provides post-breach detection, investigation, and response for threats that have bypassed initial prevention.

Submitted by klara.se· Mar 30, 2026Endpoint Security

Question

What is capability of EPP compared to EDR?

Options

  • AEPP protects against malware that has already entered the environment, and EDR focuses on
  • BEDR protects against email attacks, and EPP focuses on detecting and monitoring phishing and
  • CEDR protects against malicious email attacks, and EPP focuses on suspicious website attacks
  • DEDR protects against malware that has already entered the environment, and EPP focuses on

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    4% (2)
  • D
    94% (46)

Why each option

Endpoint Protection Platforms (EPP) focus on preventing malware and threats at the endpoint before they execute, while Endpoint Detection and Response (EDR) provides post-breach detection, investigation, and response for threats that have bypassed initial prevention.

AEPP protects against malware that has already entered the environment, and EDR focuses on

This choice incorrectly swaps the primary roles; EPP focuses on prevention, and EDR focuses on detection and response after a threat has bypassed prevention.

BEDR protects against email attacks, and EPP focuses on detecting and monitoring phishing and

EDR and EPP are endpoint-focused security solutions, not primarily dedicated to email attacks or phishing; those are typically handled by email security gateways.

CEDR protects against malicious email attacks, and EPP focuses on suspicious website attacks

Similar to B, this misrepresents the broad scope of EDR and EPP, which cover various endpoint threats, not just email or suspicious website attacks.

DEDR protects against malware that has already entered the environment, and EPP focuses onCorrect

EPP (Endpoint Protection Platform) is primarily a preventative solution designed to stop malware and other threats from getting onto an endpoint in the first place, using methods like signature-based detection. EDR (Endpoint Detection and Response) systems, conversely, continuously monitor endpoint activity to detect malicious behavior after a breach has occurred, providing tools for incident investigation and response, making them post-breach solutions.

Concept tested: EPP vs. EDR capabilities

Source: https://www.cisco.com/c/en/us/products/security/what-is-edr.html

Topics

#EPP#EDR#Endpoint Protection#Endpoint Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice