SY0-701 · Question #657
To which of the following security categories does an EDR solution belong?
The correct answer is D. Technical. EDR (Endpoint Detection and Response) is a Technical security control because it is a software-based tool that actively monitors, detects, and responds to threats on endpoints using technology - placing it squarely in the technical/logical category alongside firewalls…
Question
To which of the following security categories does an EDR solution belong?
Options
- APhysical
- BOperational
- CManagerial
- DTechnical
How the community answered
(33 responses)- A3% (1)
- C3% (1)
- D94% (31)
Explanation
EDR (Endpoint Detection and Response) is a Technical security control because it is a software-based tool that actively monitors, detects, and responds to threats on endpoints using technology - placing it squarely in the technical/logical category alongside firewalls, antivirus, and encryption.
- A (Physical) is wrong because physical controls involve tangible safeguards like locks, cameras, and access badges - not software.
- B (Operational) is wrong because operational controls govern day-to-day procedures and processes (e.g., incident response plans, background checks) performed by people, not systems.
- C (Managerial) is wrong because managerial controls are policy and governance-level measures (e.g., risk assessments, security policies) - the "plan" layer, not the "do" layer.
Memory tip: Think of the three non-technical categories as People, Paper, and Physical - if the control is software running on a machine, it's Technical. EDR runs on endpoints autonomously, so it's Technical by definition.
Topics
Community Discussion
No community discussion yet for this question.