Which term describes a platform that integrates prevention, detection, and response for endpoints?

• A. Endpoint Protection Platform (EPP)
• B. Endpoint Detection and Response (EDR)
• C. Telemetry Events
• D. Signature File Updates

Answer: (B)

This question tests understanding of how security platforms for endpoints are categorized by the functions they provide. Endpoint Detection and Response describes a platform built to continuously monitor endpoints, detect suspicious or malicious activity, and coordinate a response to contain and remediate threats. While it often includes prevention features as part of the overall protections, the defining emphasis is on the detection-and-response cycle that tackles threats in real time. In contrast, Endpoint Protection Platform is more aligned with preventive controls like traditional antivirus or firewall rules, telemetry events are just the data the system collects for analysis, and signature file updates are a maintenance action to keep defenses current. So the term that best describes a platform integrating prevention, detection, and response is Endpoint Detection and Response.