5.1 Describe Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR) Solutions 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Why is it beneficial to integrate EPP and EDR into a single endpoint security solution?

   • AIt guarantees that no malware will ever execute on the endpoint.
   • BIt provides a unified view of both prevention and detection events.
   • CIt simplifies compliance by reducing the number of security tools.
   • DIt eliminates the need for network security controls.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is evaluating a new endpoint security tool. The tool blocks known malware, provides behavioral analysis, and also offers a console for investigating alerts and isolating endpoints. How should the analyst classify this tool?

   • AAs a network security solution
   • BAs an EDR solution
   • CAs an EPP solution
   • DAs an integrated EPP/EDR solution
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An EPP solution is being deployed to protect endpoints. Which capability is most directly associated with the prevention mechanisms of an EPP?

   • ACorrelating logs from multiple endpoints to identify a campaign
   • BProviding a detailed timeline of an attack for forensic analysis
   • CBlocking execution of a file that matches a known malware signature
   • DIsolating an infected endpoint from the network
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An organization is experiencing repeated infections from a specific malware family that is not well detected by their current EPP. They want to improve prevention without replacing the entire solution. Which approach is most effective?

   • ADisable the EPP and rely on manual removal
   • BAdd an EDR solution and use its threat intelligence to update EPP policies
   • CIncrease the frequency of full system scans
   • DUpgrade the EPP's signature database
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which capability is a core function of an Endpoint Detection and Response (EDR) solution?

   • APreventing execution of known malware using signatures
   • BContinuously monitoring endpoint activity for suspicious behavior
   • CEnforcing network access policies based on device posture
   • DProviding a centralized dashboard for firewall rule management
   Reveal Solution Discussion Select an answer first