Symantec Administration of Symantec Advanced Threat Protection 3.0 - 250-441 Exam Practice Test
An Incident Responder observers and incident with multiple malware downloads from a malicious domain.
The domain in question belongs to one of the organization suppliers. The organization to the site to continue placing orders. Network is configured in Inline Block mode?
How should the Incident responder proceed?
The domain in question belongs to one of the organization suppliers. The organization to the site to continue placing orders. Network is configured in Inline Block mode?
How should the Incident responder proceed?
Correct Answer: A
Vote an answer
How should an ATP Administrator configure Endpoint Detection and Response according to Symantec best practices for a SEP environment with more than one domain?
Correct Answer: C
Vote an answer
Which threat is an example of an Advanced Persistent Threat (APT)?
Correct Answer: A
Vote an answer
An Incident Responder launches a search from ATP for a file hash. The search returns the results immediately. The responder reviews the Symantec Endpoint Protection Manager (SEPM) command status and does NOT see an indicators of compromise (IOC) search command.
How is it possible that the search returned results?
How is it possible that the search returned results?
Correct Answer: B
Vote an answer
Which threat is an example of an Advanced Persistent Threat (APT)?
Correct Answer: A
Vote an answer
Which level of privilege corresponds to each ATP account type?
Match the correct account type to the corresponding privileges.
Match the correct account type to the corresponding privileges.
Correct Answer:
Which access credentials does an ATP Administrator need to set up a deployment of ATP: Endpoint, Network, and Email?
Correct Answer: C
Vote an answer
Which two user roles allow an Incident Responder to blacklist or whitelist files using the ATP manager?
(Choose two.)
(Choose two.)
Correct Answer: A,B
Vote an answer
What is the role of Vantage within the Advanced Threat Protection (ATP) solution?
Correct Answer: B
Vote an answer
What is the role of Cynic within the Advanced Threat Protection (ATP) solution?
Correct Answer: C
Vote an answer