Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 231

What is a characteristic of an EDR solution and not of an EPP solution?

Answer options

• A. performs signature-based detection
• B. decrypts SSL traffic for better visibility
• C. stops all ransomware attacks
• D. retrospective analysis

Correct answer: D

Explanation

Retrospective analysis is a distinct capability of EDR solutions that allows them to analyze past events to identify threats, which is not typically a function of EPP solutions. Options A, B, and C represent features commonly associated with EPP solutions, such as signature-based detection and traffic decryption, but they do not encompass the advanced analytical capabilities of EDR.