PCCET · Question #122
Which two advantages does endpoint protection technology have over network traffic analysis? (Choose two.)
The correct answer is A. ability to identify most common attacks by their symptoms C. easier to deploy endpoint protection when people work from home. Endpoint protection identifies attacks by their behavioral symptoms on the device and provides continuous security for remote workers, unlike network traffic analysis which often relies on network visibility.
Question
Which two advantages does endpoint protection technology have over network traffic analysis? (Choose two.)
Options
- Aability to identify most common attacks by their symptoms
- Bdeployed and managed centrally
- Ceasier to deploy endpoint protection when people work from home
- Ddetects command and control channels
- Ecan easily identify worms
How the community answered
(27 responses)- A93% (25)
- B4% (1)
- E4% (1)
Why each option
Endpoint protection identifies attacks by their behavioral symptoms on the device and provides continuous security for remote workers, unlike network traffic analysis which often relies on network visibility.
Endpoint protection monitors local system activities like process execution, file modifications, and API calls, allowing it to identify attack patterns and symptoms even if network traffic is encrypted.
Both endpoint protection and network traffic analysis solutions can be centrally deployed and managed.
Endpoint protection agents reside directly on user devices, ensuring security coverage and enforcement regardless of the user's network location, making it ideal for remote work scenarios.
Both endpoint protection and network traffic analysis technologies can detect command and control channels through various methods.
Both endpoint protection and network traffic analysis can detect worms, albeit through different mechanisms (host-based vs. network-based behavioral patterns).
Concept tested: Endpoint vs. Network Protection Advantages
Topics
Community Discussion
No community discussion yet for this question.