A company had a recent data leak incident. A security engineer investigating the incident discovered that a malicious link was accessed by multiple…

Comprehensive and Detailed

Endpoint Detection and Response (EDR) tools provide behavioral analytics and continuous

monitoring to detect malware such as backdoors, which is especially critical on endpoints like macOS

devices. These tools are essential to detect post-compromise activities and contain threats before

they spread.

Secure Email Gateway (e.g., Cisco ESA) plays a key role in blocking phishing emails—the initial vector

in this attack. It uses filters and reputation analysis to prevent malicious links or attachments from

reaching end users.

Incorrect Options:

C. DLP focuses on preventing data exfiltration, not phishing prevention or backdoor detection.

D. IPS is effective for known signature-based threats but less effective against phishing links and

endpoint-level backdoors.

E. WAF protects web servers, not end-user devices from phishing or backdoor infections.

Therefore, the correct answers are: A and B.