Endpoint Security EDR Exam Questions with Complete Solutions

Zero Trust Application - ANSWER-The primary differentiator WES offers when compared to its competitors. What does Threat Hunting do? - ANSWER-Proactively discovers new hacking and evasion techniques and tactics. WES - ANSWER-WatchGuard Endpoint Security How do you manage WES? - ANSWER-WES is managed through a single-pane-of-glass cloud console - Panda or WatchGuard Cloud. How is WES deployed? - ANSWER-WES is deployed using one lightweight agent. What is Patch Management? - ANSWER-Patch Management is a user-friendly solution for managing vulnerabilities in operating systems and third-party applications on Windows workstations and servers. It reduces the attack surface, while at the same time strengthening your organization's prevention and containment capabilities. SIEM Feeder - ANSWER-SIEM integration allows for seamless integration of events gathered from protected endpoints with existing corporate SIEM solutions without additional deployments on user devices. How is SIEM Feeder available? - ANSWER-SIEM feeder is only available as an add-on module (at an additional cost) when purchasing advanced WES solutions. When purchasing Advanced WES, does Threat Hunting have to be purchased separately? - ANSWER-Threat Hunting is included in the price of Advanced WES. What does Zero Trust application enable? - ANSWER-Zero Trust application in WES enables continuous endpoint monitoring, detection, and 100% classification of all activity to reveal and block anomalous behaviors of users, machines, and processes. Is the SIEM Feeder module included free of charge as an add-on to WES solutions? - ANSWER-No, it must be added as a module at an additional cost. Do WES licenses get applied to Firewalls? - ANSWER-No, they are applied to endpoints only (servers, desktops, laptops, mobile devices). Is Patch Management automatically included when purchasing WES or Advanced WES? - ANSWER-Patch Management must be purchased as an additional module (additional cost).