CompTIA CySA+ CS0-003 Practice Question

The primary purpose of Endpoint Detection and Response (EDR) is to monitor endpoints, detect malicious activities, and provide responses to security threats. EDR tools continuously collect data from endpoints (devices such as laptops, servers, and mobile phones) and use this data to identify patterns of potentially malicious activity. EDR solutions do not perform tasks like patch management or log analysis aggregation.