The “Do I Know This Already?” quiz allows you to assess whether you should read this entire chapter thoroughly or jump to the “ Exam Preparation Tasks” section. The following SCOR 350-701 exam objectives are covered in this chapter:ĭomain 5.0 Endpoint Protection and Detectionĥ.1 Compare Endpoint Protection Platforms (EPP) and Endpoint Detection & Response (EDR) solutionsĥ.2 Explain antimalware, retrospective security, indicator of compromise (IOC), antivirus, dynamic file analysis, and endpoint-sourced telemetryĥ.3 Configure and verify outbreak control and quarantines to limit infectionĥ.4 Describe justifications for endpoint-based securityĥ.5 Describe the value of endpoint device management and asset inventory such as MDMĥ.7 Describe endpoint posture assessment solutions to ensure endpoint securityĥ.8 Explain the importance of an endpoint patching strategy Introduction to Endpoint Protection and Detection This chapter covers the following topics:
Chapter 11 Endpoint Protection and Detection