SY0-701 · Question #1011
A company's antivirus solution is effective in blocking malware but often has false positives. The security team has spent a significant amount of time on investigations but cannot determine a root…
The correct answer is B. EDR. EDR (Endpoint Detection and Response) uses advanced heuristic and behavioral analysis to detect, investigate, and respond to threats, reducing false positives and providing deeper insight than traditional antivirus.
Question
A company's antivirus solution is effective in blocking malware but often has false positives. The security team has spent a significant amount of time on investigations but cannot determine a root cause. The company is looking for a heuristic solution. Which of the following should replace the antivirus solution?
Options
- ASIEM
- BEDR
- CDLP
- DIDS
How the community answered
(27 responses)- A15% (4)
- B74% (20)
- C4% (1)
- D7% (2)
Explanation
EDR (Endpoint Detection and Response) uses advanced heuristic and behavioral analysis to detect, investigate, and respond to threats, reducing false positives and providing deeper insight than traditional antivirus.
Community Discussion
No community discussion yet for this question.