Exam 350-701 topic 1 question 264 discussion

An effective endpoint protection platform needs to leverage advanced anti-malware capabilities such as: • Machine learning: Machine learning capabilities allow an EPP to leverage large-scale data to determine the true malicious nature of files. • Threat intelligence: Expansive threat intelligence allows an EPP to leverage both historical and real-time data from billions of threats to automatically block known attacks. • Sandboxing: Sandboxing allows an EPP to isolate suspect files in a safe environment. Within this environment, the EPP can safely detonate and monitor the nature of the files without risking detriment to the rest of the system. Even with all these capabilities, no endpoint protection platform can guarantee 100 percent efficacy. That is why a traditional antivirus solution cannot provide sufficient endpoint security. A true next-generation endpoint security solution combines endpoint protection platform capabilities with EDR capabilities.