組織は、さまざまなエンドポイントからデータの収集と集約を導入する必要があります。アナリストがこのデータを収集できるように導入するのに最適なツールは次のうちどれですか?
正解:C
EDR stands for Endpoint Detection and Response, which is a tool that collects and aggregates data from various endpoints, such as laptops, servers, or mobile devices. EDR helps analysts monitor, detect, and respond to threats and incidents on the endpoints. EDR is more suitable than DLP (Data Loss Prevention), NAC (Network Access Control), or NIDS (Network Intrusion Detection System) for data collection and aggregation from endpoints.
References: CompTIA CySA+ CS0-003 Certification Study Guide, Chapter 2: Software and Systems Security, page 75; What Is Data Aggregation? (Examples + Tools), Section: Data Aggregation: How It Works, Subsection: 1. Data Collection.