MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does “EDR” stand for in cybersecurity?
a. Electronic Data Resource
b. Endpoint Detection and Response
c. External Data Recovery
d. Endpoint Device Registry
Answer: b. Endpoint Detection and Responsecrowdstrike+2
What is the main purpose of EDR?
a. Backing up files
b. Monitoring and responding to threats on endpoints
c. Updating device drivers
d. Blocking emails
Answer: b. Monitoring and responding to threats on endpointsfortinet+2
Which of these devices is considered an endpoint in EDR?
a. Web server
b. Laptop
c. Printer
d. All of the above
Answer: d. All of the abovepaloaltonetworks+2
What is a common feature of EDR solutions?
a. Video streaming
b. Continuous monitoring
c. File compression
d. Network acceleration
Answer: b. Continuous monitoringlansweeper+2
EDR tools are primarily used to detect and respond to what?
a. Physical security threats
b. Software licensing issues
c. Cybersecurity threats
d. Power failures
Answer: c. Cybersecurity threatscybereason+2
Which action might an EDR solution take during a cyber attack?
a. Ignore the incident
b. Isolate the impacted device
c. Print a report
d. Install a video game
Answer: b. Isolate the impacted devicelearn.microsoft+2
What does “endpoint” refer to in EDR?
a. Only network routers
b. Any device connected to a network
c. Mobile apps
d. Databases
Answer: b. Any device connected to a networkcisco+2
Which of the following tasks can EDR automate?
a. Social media posting
b. Threat investigation and response
c. Calendar reminders
d. Printing labels
Answer: b. Threat investigation and responsemicrosoft+2
EDR helps security teams by:
a. Automatically patching printers
b. Monitoring and alerting suspicious activities on devices
c. Lowering electricity bills
d. Sending marketing emails
Answer: b. Monitoring and alerting suspicious activities on devicessentinelone+2
The “response” in EDR means:
a. Ignoring alerts
b. Taking action to contain and remediate threats
c. Blocking all network traffic
d. Deleting all data
Answer: b. Taking action to contain and remediate threatsfortinet+2
What is NOT a function of EDR?
a. Data loss prevention
b. Tennis scoring
c. Malicious activity detection
d. Remediation after an attack
Answer: b. Tennis scoringtenable+2
Why is EDR important for organizations?
a. It improves internet speed
b. It helps detect and stop cyber threats
c. It sends out advertisements
d. It manages physical access cards
Answer: b. It helps detect and stop cyber threatsseqrite+2
What data does an EDR solution collect?
a. Weather data
b. Endpoint and user activity logs
c. Movie recommendations
d. Cooking recipes
Answer: b. Endpoint and user activity logshexnode+2
Who typically uses EDR tools?
a. Accountants
b. Security operations teams
c. HR managers
d. Marketing teams
Answer: b. Security operations teamslearn.microsoft+2
Which threat can EDR help identify?
a. Ransomware
b. Slow internet
c. Overheating hardware
d. Power outages
Answer: a. Ransomwaresentinelone+2
What is threat hunting in the context of EDR?
a. Looking for endangered animals
b. Proactively searching for threats in endpoints
c. Shopping for antivirus software
d. Sending newsletters
Answer: b. Proactively searching for threats in endpointsseqrite+2
EDR systems often use which technology?
a. Artificial Intelligence and Machine Learning
b. 3D printing
c. VR headsets
d. Solar panels
Answer: a. Artificial Intelligence and Machine Learninghuntress+2
Which is an example of a real-time response from EDR?
a. Sending a warning to a user’s screen
b. Blocking a suspicious program instantly
c. Scheduling system maintenance
d. Lowering device brightness
Answer: b. Blocking a suspicious program instantlyhuntress+2
What capability do many EDR tools offer for past incidents?
a. Forensic analysis to investigate what happened
b. Free movie streaming
c. Tax filing support
d. Disk fragmentation
Answer: a. Forensic analysis to investigate what happenedlumificyber+2
EDR can integrate with which other security technology?
a. Identity cards
b. SIEM (Security Information and Event Management)
c. Bluetooth speakers
d. Spreadsheet software
Answer: b. SIEM (Security Information and Event Management)lansweeper+2
Which feature helps EDR detect new and unknown threats?
a. Static coding
b. Behavioral analytics
c. Spreadsheet formulas
d. Video streaming
Answer: b. Behavioral analyticsmicrosoft+2
What is the first step EDR takes when a suspicious activity is detected?
a. Reboots the computer
b. Generates an alert for investigation
c. Changes the desktop wallpaper
d. Shuts down the entire network
Answer: b. Generates an alert for investigationthreatintelligence+2
EDR solutions help reduce:
a. Hardware costs
b. Attack surfaces and vulnerabilities
c. Drinking water usage
d. Printer ink usage
Answer: b. Attack surfaces and vulnerabilitiesfortinet+2
What kind of data does EDR analyze?
a. Pictures and video files
b. Processes, connections, and user actions
c. Music files
d. Only external hard drives
Answer: b. Processes, connections, and user actionslansweeper+2
Which of these is a benefit of EDR?
a. Recovers deleted family photos
b. Provides holistic visibility of endpoint activity
c. Increases battery life
d. Plays audio clips
Answer: b. Provides holistic visibility of endpoint activitythreatintelligence+2
What happens when EDR finds a confirmed threat?
a. No action is taken
b. The endpoint can be isolated or cleaned
c. The device is restarted
d. A calendar event is created
Answer: b. The endpoint can be isolated or cleanedpaloaltonetworks+2
What kind of attacks can EDR block?
a. Historical attacks only
b. Sophisticated malware attacks
c. Weather reports
d. Overheating alarms
Answer: b. Sophisticated malware attacksmicrosoft+2
How does EDR use threat intelligence?
a. For weather forecasts
b. To detect known attack patterns
c. For advertisement delivery
d. To recommend restaurants
Answer: b. To detect known attack patternshuntress+2
What is one outcome of effective EDR implementation?
a. More spam emails
b. Reduced risk of data breaches
c. Increased screen brightness
d. Slower processing speed
Answer: b. Reduced risk of data breachestenable+2
What aspect makes EDR different from traditional antivirus?
a. Only updates daily
b. Provides advanced detection of behaviors and responses, not just signatures
c. Can only run on Linux
d. Needs no network connection
Answer: b. Provides advanced detection of behaviors and responses, not just signaturesseqrite+2
What is an incident in EDR terminology?
a. A screenshot
b. A group of alerts relating to the same attack or attacker
c. A hardware replacement
d. A product discount
Answer: b. A group of alerts relating to the same attack or attackerpaloaltonetworks+2
Which action does EDR NOT perform?
a. Alert security teams
b. Isolate unsafe endpoints
c. Assist with physical office security
d. Provide forensic details
Answer: c. Assist with physical office securitylearn.microsoft+2
Which is an endpoint example in an enterprise?
a. Desktop computer
b. Smart phone
c. IoT device
d. All of the above
Answer: d. All of the abovecisco+2
Why is endpoint visibility crucial in EDR?
a. For gardening
b. To identify suspicious behaviors quickly
c. For media playback
d. For adjusting power supply
Answer: b. To identify suspicious behaviors quicklytenable+2
Who benefits most from using EDR?
a. Security analysts and administrators
b. Experts in cooking
c. Car mechanics
d. Event planners
Answer: a. Security analysts and administratorsfortinet+2
What does EDR do if it cannot remediate a detected threat automatically?
a. Ignores it completely
b. Notifies human analysts for intervention
c. Deletes user photos
d. Turns off the computer
Answer: b. Notifies human analysts for interventionlearn.microsoft+2
EDR solutions need which of the following to work best?
a. Updated threat intelligence
b. Frequent flyer programs
c. Large hard disks
d. Colourful wallpaper
Answer: a. Updated threat intelligencelansweeper+2
Which is NOT a EDR function?
a. Automated response
b. Monitoring endpoint activities
c. Forensic analysis
d. Serving web pages
Answer: d. Serving web pagessentinelone+2
What could EDR flag as suspicious activity?
a. Normal system updates
b. User tries to access sensitive files without permission
c. Increasing screen brightness
d. Scheduled backups
Answer: b. User tries to access sensitive files without permissionsentinelone+2
How does EDR reduce time to respond to threats?
a. By generating slow reports
b. Through automation and real-time alerts
c. By waiting for user action
d. By closing all running applications
Answer: b. Through automation and real-time alertsmicrosoft+2
What is one key result of behavioral analytics in EDR?
a. Detects only viruses
b. Detects abnormal endpoint behavior
c. Measures hardware temperature
d. Manages email drafts
Answer: b. Detects abnormal endpoint behaviorseqrite+2
EDR incident response can include which of the following actions?
a. Playing music
b. Quarantining malicious files
c. Sending mass emails
d. Opening social media accounts
Answer: b. Quarantining malicious filesfortinet+2
What is network segmentation in EDR?
a. Dividing endpoints into groups to limit threat spread
b. Scheduling lunchtime
c. Sharing files between users
d. Installing video drivers
Answer: a. Dividing endpoints into groups to limit threat spreadtenable+2
What does “remediation” mean in EDR?
a. Ignoring problems
b. Taking steps to fix or remove threats
c. Making backups
d. Downloading music files
Answer: b. Taking steps to fix or remove threatslearn.microsoft+2
Can EDR help with compliance and reporting?
a. Yes, by tracking incidents and responses
b. No, it does not record anything
c. Only in Europe
d. Only for printers
Answer: a. Yes, by tracking incidents and responsesthreatintelligence+2
Why is real-time monitoring important in EDR?
a. It makes the desktop background change
b. It enables immediate detection and action on threats
c. It improves battery life
d. It makes devices lighter
Answer: b. It enables immediate detection and action on threatsheimdalsecurity+2
What role does automation play in EDR?
a. It reduces manual work for analysts
b. It sends out invitations
c. It compares weather patterns
d. It closes open tabs
Answer: a. It reduces manual work for analystshuntress+2
Which of these can EDR coordinate with automatically?
a. Local printers
b. Incident response playbooks
c. Social media sites
d. Video games
Answer: b. Incident response playbooksmicrosoft+2
Why is collecting activity data from endpoints critical?
a. For faster boot-up times
b. To find patterns that reveal threats
c. For printing speed
d. For more storage space
Answer: b. To find patterns that reveal threatshexnode+2
What is a simple analogy for EDR’s function?
a. Like a smoke detector for endpoints
b. Like a sunscreen for devices
c. Like a music playlist
d. Like a coffee maker
Answer: a. Like a smoke detector for endpointsthreatintelligence+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info