Arrange the following Endpoint Detection and Response (EDR) workflow stages in the correct chronological order from first to last.
Answer
Continuously record endpoint telemetry and system events, Detect suspicious behavior or attack indicators, Investigate and correlate stored historical evidence, Execute containment and remediation actions
Explanation
### The order
1. **Continuously record endpoint activity.** EDR first gathers observations about endpoint changes and actions.
2. **Identify activity that may align with attack indicators or abnormal behavior.** Recorded behavior can reveal a possible event.
3. **Review or correlate the stored telemetry.** Analysts or platforms examine evidence in context.
4. **Use findings to support investigation or containment.** The reviewed evidence helps teams decide how to respond.
### The concept
EDR combines ongoing observation with analysis and response support. The steps describe a logical workflow, although monitoring and analysis may continue throughout an incident.
### Terms
- **Correlation**: Examining relationships between separate pieces of information.
- **Containment**: Limiting the effects of an incident.
### Remember
Record first, assess the signal, review evidence, then use findings to guide response.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free