5.4 Explain Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) CYBERSECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   An organization uses separate tools for endpoint, network, and email security. The security team is struggling to identify attacks that involve multiple stages across these layers. What is the primary benefit of adopting an XDR solution?

   • AIt correlates alerts from multiple sources into a single incident view
   • BIt provides a single console for managing all network devices
   • CIt automatically patches all vulnerabilities across the environment
   • DIt eliminates the need for any other security tools
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security manager is comparing EDR and XDR solutions. They need a solution that provides visibility into endpoints, network traffic, and email threats. Which solution should they choose?

   • AXDR
   • BEDR
   • CAn email gateway
   • DA firewall
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which statement best describes the role of EDR in endpoint security?

   • AIt provides a centralized dashboard for managing firewall rules on endpoints
   • BIt focuses solely on preventing malware infections by blocking malicious files before execution
   • CIt replaces the need for security information and event management (SIEM) systems
   • DIt records endpoint activity and provides tools to detect, investigate, and respond to threats
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security team receives separate alerts from their EDR, network monitoring, and email security tools. The alerts appear to be related to the same attack, but the team is spending too much time manually correlating them. What is the primary benefit of an XDR solution in this situation?

   • AIt eliminates all false positives
   • BIt provides a single console for managing all IT assets
   • CIt automatically patches all systems
   • DIt automatically correlates related alerts into a single incident
   Reveal Solution Discussion Select an answer first