Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 323

What is offered by an EPP solution but not an EDR solution?

Answer options

• A. investigation
• B. containment
• C. sandboxing
• D. detection

Correct answer: C

Explanation

Sandboxing is a feature unique to EPP solutions, allowing for the testing of files in a secure environment before they are executed. EDR solutions focus more on detecting and responding to threats rather than pre-execution analysis. Therefore, options A, B, and D are capabilities that may be shared with EDR solutions.