Exam CISM All QuestionsBrowse all questions from this exam
Question 1075

Which of the following controls would BEST help to detect a targeted attack exploiting a zero-day vulnerability?

    Correct Answer: C

    Endpoint detection and response (EDR) is designed to detect and respond to suspicious activities on endpoints, which is crucial for identifying targeted attacks that exploit zero-day vulnerabilities. EDR solutions monitor and analyze endpoint activity to identify unusual behavior patterns and potential threats, even if the threat is exploiting an unknown or zero-day vulnerability.

Discussion
isaphiltrickOption: C

Endpoint Detection and Response (EDR) is designed to detect and respond to suspicious activities on endpoints, which is crucial for identifying targeted attacks that exploit zero-day vulnerabilities. EDR solutions monitor and analyze endpoint activity to identify unusual behavior patterns and potential threats, even if the threat is exploiting an unknown or zero-day vulnerability.

shootnotOption: D

D- XDR provides a holistic view of environment by detecting incidents based on the logs from multiple sources and provide attack path analysis.