An organization is reviewing endpoint security solutions. In evaluating products, the organization has the following requirements: 1. Support server, laptop, and desktop infrastructure 2. Due to…

Question

Options

• AData loss prevention
• BApplication whitelisting
• CEndpoint detect and respond
• DRights management
• ELog monitoring
• FAntivirus

• A
  5% (3)
• B
  2% (1)
• C
  81% (46)
• E
  11% (6)
• F
  2% (1)

Explanation

The four requirements map directly to two specific capabilities. Endpoint Detection and Response (EDR) satisfies requirements 1 and 2: it runs on servers, laptops, and desktops, and provides active (automated) protection without requiring constant manual intervention from a small security team. Rights Management (IRM/DRM) satisfies requirements 3 and 4: it empowers users to self-classify and label documents and apply usage policies themselves, and it protects data both at rest (files are encrypted) and in use (policies are enforced even when a file is open or shared). DLP (A) protects data in transit but does not give users a self-service classification workflow. Application whitelisting (B) controls software execution, not data. Log monitoring (E) is passive, not protective. Antivirus (F) is reactive and does not address data classification or protection policies.

No community discussion yet for this question.