フリー問題

問題文

What does endpoint detection and response provide beyond blocking known malicious files?

選択肢

1. A faster signature update channel.
2. A record of what happened on the endpoint over time, together with the ability to act on that endpoint remotely once something has been found.
3. A complete inventory of the software installed on every endpoint, refreshed each time one of those machines connects to the corporate network again.
4. A guarantee that no malicious file will ever be written to the disk, achieved by checking every write against a list of approved fingerprints before the operating system is allowed to complete the operation that produced it.