Which term describes a security capability that provides detection and response across multiple environments?

• A. WatchGuard Full Encryption
• B. Early Launch Anti-Malware (ELAM)
• C. XDR Capabilities
• D. Indicators of Compromise (IOCs)

Answer: (C)

The idea being tested is the ability to detect and respond across different environments. XDR capabilities provide this by unifying security telemetry from multiple domains—endpoints, networks, cloud services, and applications—and correlating it to identify threats that traverse those environments. With XDR, alerts from various sources are analyzed together, enabling a coordinated response across devices, networks, and cloud resources, which improves visibility and accelerates remediation.

Other options don’t fit this cross-environment focus. Early Launch Anti-Malware operates during the boot process on a single machine, so its scope is limited to one system rather than across multiple environments. Indicators of Compromise are signs used to recognize breaches, but they don’t by themselves deliver detection and response across environments. WatchGuard Full Encryption is about protecting data through encryption, not about detecting and responding to threats across different environments.