Traditional antivirus compares files against signatures of known malware. Modern attacks use fileless techniques, legitimate admin tools and stolen credentials that signatures cannot catch. The newer tools on the Security+ objectives watch behavior instead: what processes do, where data goes and how users normally act. Endpoint detection and response (EDR), extended detection and response (XDR), data loss prevention (DLP) and user and entity behavior analytics (UEBA) each focus on a different question, and exam questions test whether you can match a scenario to the right one.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.