5.1 Describe Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR) Solutions 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is deploying a new endpoint security solution. They have a mix of Windows and Linux servers, and they need to ensure that both EPP and EDR capabilities are available on all endpoints. They also want to minimize the number of agents installed. What is the best approach?

   • ADeploy EPP on Windows and EDR on Linux
   • BDeploy a single agent that provides both EPP and EDR capabilities
   • CDeploy separate EPP and EDR agents on each endpoint
   • DDeploy EDR only on servers and EPP only on workstations
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization's security team suspects a sophisticated attacker has been operating on a single endpoint for weeks. They need to understand the full scope of the attack, including every process, file, and network connection made during that period. Which capability is most essential?

   • AContinuous monitoring and recording of endpoint activity
   • BSignature-based malware scanning
   • CNetwork access control
   • DApplication whitelisting
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator wants to prevent users from running unauthorized applications on their workstations. Which EPP feature is designed for this?

   • AEmail filtering
   • BApplication control
   • CNetwork access control
   • DData loss prevention
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is deploying an EPP solution and wants to ensure that when a new malware variant is detected on one endpoint, other endpoints are automatically protected. Which approach is most effective?

   • AManually quarantine the affected endpoint
   • BRely on the EPP's signature updates
   • CIncrease the frequency of full system scans
   • DIntegrate the EPP with an EDR that shares threat intelligence
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A small business wants to protect its Windows workstations from ransomware and other known malware without adding a heavy management overhead. They have a limited IT staff and need a solution that automatically updates signatures and blocks malicious files. Which type of solution is most appropriate?

   • AAn EPP solution with automated signature updates
   • BAn EDR solution with manual threat hunting
   • CA network-based intrusion detection system
   • DA host-based firewall
   Reveal Solution Discussion Select an answer first