Exam 350-701 topic 1 question 247 discussion

It's so obvious if you know the difference between EDR and EPP.

A. when there is a need to have more advanced detection capabilities

Selected Answer:A What is the difference between an endpoint protection platform (EPP) and endpoint detection and response (EDR)? EDR focuses primarily on advanced threats that are designed to evade front-line defenses and have successfully entered into the environment. An EPP focuses solely on prevention at the perimeter. It is difficult, if not impossible, for an EPP to block 100 percent of threats. So in the ideal case, an endpoint security solution deploys both EPP and EDR capabilities. https://www.cisco.com/c/en/us/products/security/endpoint-security/what-is-endpoint-detection- response- edr.html#:~:text=What%20is%20the%20difference%20between,on%20prevention%20at%20the %20perimeter.

Its A. EDR provide advanced capabilities as EPP provide your traditional protections.

Answer should be A

A EDR focuses primarily on advanced threats that are designed to evade front-line defenses and have successfully entered into the environment. An EPP focuses solely on prevention at the perimeter.

Endpoint Detection and Response (EDR)is the next gen replacement of traditional anti-malware which was primarily signature based. EDR is centrally managed because it is practically run by crowd sourced AI. Having a firewall on the network wouldnt influence a decision between the two. Signature based Anti-malware is going bye-bye.

Traditional EPP Advanced EDR So A fits better

Correct answer is A: when there is a need to have more advanced detection capabilities. https://www.esecurityplanet.com/endpoint/antivirus-vs-epp-vs-edr/#:~:text=Endpoint%20detection%20and%20response%20(EDR)%20represents%20the%20newest%20and%20most,advanced%20layer%20of%20endpoint%20protection.&text=Whereas%20EPP%20is%20a%20first,they%20can%20cause%20significant%20damage.