Which statement best describes End Point Detection and Response (EDR)?

Which statement best describes End Point Detection and Response (EDR)?

• A. Detects only malware signatures
• B. Monitors network traffic only
• C. Uses machine learning to detect and respond to abnormal activities on a workstation
• D. Provides password management

Answer: (C)

End point detection and response focuses on devices themselves, using data from the endpoint to spot unusual behavior rather than just relying on known malware signatures. It often employs machine learning or behavioral analytics to detect abnormal activities on a workstation and then takes action to respond—such as isolating the device, stopping malicious processes, or collecting forensic data to aid investigation. This goes beyond signature-based detection or simple network monitoring, and it’s not about password management. The described statement captures the essence: using machine learning to detect and respond to abnormal activities on a workstation.

End point detection and response focuses on devices themselves, using data from the endpoint to spot unusual behavior rather than just relying on known malware signatures. It often employs machine learning or behavioral analytics to detect abnormal activities on a workstation and then takes action to respond—such as isolating the device, stopping malicious processes, or collecting forensic data to aid investigation. This goes beyond signature-based detection or simple network monitoring, and it’s not about password management. The described statement captures the essence: using machine learning to detect and respond to abnormal activities on a workstation.