🛡️ Free practice test question from: Endpoint Security (Security+)

Given the comprehensive requirements, Endpoint Detection and Response (EDR) is the most suitable solution. It not only addresses the need for advanced threat detection beyond signature-based methods but also offers automated response capabilities, detailed root-cause analysis, and seamless integration with existing systems.

A) Traditional Antivirus Software

→ Primarily relies on signature-based detection

→ Limited capability to detect unknown or zero-day threats

→ Minimal behavioral analysis

→ Manual intervention typically required for threat remediation

→ Basic integration capabilities

→ Does NOT meet the organization's advanced security needs

B) Host-based Intrusion Prevention System (HIPS)

→ Monitors system activities and potential malicious behaviors

→ Can detect some anomalies and unauthorized actions

→ Provides some real-time protection

→ Limited automated response capabilities

→ Partially meets behavioral analysis requirements

→ Insufficient for comprehensive endpoint security

D) Host-based Firewall

→ Focuses on network traffic filtering

→ Limited to preventing unauthorized network access

→ No advanced malware detection capabilities

→ No behavioral analysis or machine learning

→ Minimal system protection and response mechanisms

→ Does NOT address the organization's sophisticated security needs