Question 46

EDR solutions belong to the Technical security category.

EDR (Endpoint Detection and Response) solutions are classified under the Technical security category as they involve the implementation of technology to detect, respond to, and mitigate threats on endpoints.

A) Physical

The Physical security category focuses on protecting physical assets and environments, such as buildings and hardware, from physical threats. EDR solutions do not address these concerns directly, as they are primarily software-based technologies designed to monitor and respond to cybersecurity threats.

B) Operational

Operational security involves processes and procedures that protect sensitive information and ensure the integrity of operations within an organization. While important, this category does not encompass the technical mechanisms and tools used for threat detection and response like EDR solutions do.

C) Managerial

Managerial security refers to the policies, procedures, and governance frameworks that guide an organization's security strategy. Although managerial practices are essential for overall security management, they do not include the specific technological components and functionalities of EDR solutions.

D) Technical

Technical security is the category that includes solutions like EDR, which utilize technology to provide protection against threats. EDR solutions specifically focus on monitoring endpoints, detecting anomalies, and responding to security incidents, making this the correct classification.

Conclusion

The classification of EDR solutions as Technical security is definitive because they rely on software and technology for threat detection and response. In contrast, the other options—Physical, Operational, and Managerial—do not encompass the technological focus of EDR solutions, thereby clarifying the distinction and confirming the correct answer.