A SOC analyst recommends adding a layer of defense for all endpoints that will better protect against external threats regardless of the device's operating system. Which of the following best meets th

The correct answer is D. EDR. EDR stands for Endpoint Detection and Response, which is a layer of defense that monitors endpoints for malicious activity and provides automated or manual response capabilities. EDR can protect against external threats regardless of the device's operating system, as it can detec

Submitted by priya_blr· Mar 6, 2026Security operations

Question

A SOC analyst recommends adding a layer of defense for all endpoints that will better protect against external threats regardless of the device's operating system. Which of the following best meets this requirement?

Options

ASIEM
BCASB
CSOAR
DEDR

How the community answered

(32 responses)

A
3% (1)
B
6% (2)
C
3% (1)
D
88% (28)

Explanation

EDR stands for Endpoint Detection and Response, which is a layer of defense that monitors endpoints for malicious activity and provides automated or manual response capabilities. EDR can protect against external threats regardless of the device's operating system, as it can detect and respond to attacks based on behavioral analysis and threat intelligence. EDR is also one of the tools that CompTIA CySA+ covers in its exam objectives

Topics

#Endpoint security#EDR#Threat detection#Security controls

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice