File Info
| Exam | Administration of Symantec Advanced Threat Protection 3.0 |
| Number | 250-441 |
| File Name | Symantec.250-441.ExamLabs.2019-10-04.91q.tqb |
| Size | 422 KB |
| Posted | Oct 04, 2019 |
| Download | Symantec.250-441.ExamLabs.2019-10-04.91q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
What is the second stage of an Advanced Persistent Threat (APT) attack?
- Exfiltration
- Incursion
- Discovery
- Capture
Correct answer: B
Question 2
Which SEP technology does an Incident Responder need to enable in order to enforce blacklisting on an endpoint?
- System Lockdown
- Intrusion Prevention System
- Firewall
- SONAR
Correct answer: A
Question 3
An Incident Responder wants to create a timeline for a recent incident using Syslog in addition to ATP for the After Actions Report.
What are two reasons the responder should analyze the information using Syslog? (Choose two.)
- To have less raw data to analyze
- To evaluate the data, including information from other systems
- To access expanded historical data
- To determine what policy settings to modify in the Symantec Endpoint Protection Manager (SEPM)
- To determine the best cleanup method
Correct answer: BE
