Which solution provides visibility over endpoints to detect and respond to threats?

• A. Host-Based Firewall filters inbound traffic.
• B. Secure Boot prevents boot-time malware.
• C. Endpoint Detection and Response (EDR) provides better visibility over endpoints to detect and respond to cyber threats and exploits.
• D. UEBA identifies suspicious activity.

Answer: (C)

Gaining visibility into endpoint activity to detect and respond to threats requires a tool that continuously monitors what happens on each device and can take action based on that data. Endpoint Detection and Response does this by collecting detailed telemetry from endpoints, watching for suspicious behavior and indicators of compromise, and enabling rapid responses such as isolating a device, stopping a malicious process, or gathering forensic data for investigation. This combination of ongoing visibility and built-in response capabilities is what makes EDR the best fit for detecting and countering cyber threats on endpoints. In contrast, a host-based firewall focuses on controlling inbound traffic rather than providing broad endpoint telemetry, Secure Boot protects the system during boot but doesn’t offer ongoing threat visibility, and UEBA analyzes user and entity behavior across systems but isn’t centered on comprehensive endpoint visibility and containment.