ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-701 All Questions

View all questions & answers for the SY0-701 exam
Go to Exam

Exam SY0-701 topic 1 question 411 discussion

Actual exam question from CompTIA's SY0-701
Question #: 411
Topic #: 1
[All SY0-701 Questions]

A security analyst wants to better understand the behavior of users and devices in order to gain visibility into potential malicious activities. The analyst needs a control to detect when actions deviate from a common baseline. Which of the following should the analyst use?

  • A. Intrusion prevention system
  • B. Sandbox
  • C. Endpoint detection and response
  • D. Antivirus
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Fourgehan at Nov. 29, 2024, 11:21 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Fourgehan
5 months, 1 week ago
Selected Answer: C
Endpoint detection and response (EDR) solutions provide continuous monitoring of endpoints (such as computers, servers, or other devices) to detect, investigate, and respond to suspicious activities. They are designed to analyze behaviors and identify deviations from normal patterns, offering visibility into potential malicious activities
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago