CompTIA Security+ (SY0-601) — Question 810

Historically, a company has had issues with users plugging in personally owned removable media devices into corporate computers. As a result, the threat of malware incidents is almost constant. Which of the following would best help prevent the malware from being installed on the computers?

Answer options

• A. AUP
• B. NGFW
• C. DLP
• D. EDR

Correct answer: D

Explanation

EDR (Endpoint Detection and Response) solutions are designed to monitor, detect, and respond to malware activities on endpoints, making them highly effective in preventing malware installation. In contrast, AUP (Acceptable Use Policy) and DLP (Data Loss Prevention) policies may help manage user behavior but do not actively prevent malware. NGFW (Next-Generation Firewall) primarily focuses on network security rather than endpoint threats.