How does Endpoint detection and response support the objective “monitors endpoint behavior and supports rapid investigation and containment”?

Question

SecurityTalent knowledge answer. Members may add responsible, source-based context; do not post secrets, personal data, exam dumps or recalled live exam questions.

 · Accepted Answer

Endpoint detection and response is a cybersecurity control or practice. It supports this objective: monitors endpoint behavior and supports rapid investigation and containment. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.

NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework