Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 224

What is the primary difference between an Endpoint Protection Platform and an Endpoint Detection and Response?

Answer options

• A. EPP focuses on prevention, and EDR focuses on advanced threats that evade perimeter defenses.
• B. EDR focuses on prevention, and EPP focuses on advanced threats that evade perimeter defenses.
• C. EPP focuses on network security, and EDR focuses on device security.
• D. EDR focuses on network security, and EPP focuses on device security.

Correct answer: A

Explanation

The correct answer is A because Endpoint Protection Platforms (EPP) are designed to prevent attacks, while Endpoint Detection and Response (EDR) solutions are geared towards detecting and responding to advanced threats that have already bypassed initial defenses. The other options incorrectly swap the roles of EPP and EDR or misrepresent their focus areas.