File Info
| Exam | Administration of Symantec Advanced Threat Protection 3.0 |
| Number | 250-441 |
| File Name | Symantec.250-441.PassCertification.2018-11-16.42q.tqb |
| Size | 147 KB |
| Posted | Nov 16, 2018 |
| Download | Symantec.250-441.PassCertification.2018-11-16.42q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Why is it important for an Incident Responder to analyze an incident during the Recovery phase?
- To determine the best plan of action for cleaning up the infection
- To isolate infected computers on the network and remediate the threat
- To gather threat artifacts and review the malicious code in a sandbox environment
- To access the current security plan, adjust where needed, and provide reference materials in the event of a similar incident
Correct answer: D
Question 2
Which two database attributes are needed to create a Microsoft SQL SEP database connection? (Choose two.)
- Database version
- Database IP address
- Database domain name
- Database hostname
- Database name
Correct answer: BD
Question 3
How does an attacker use a zero-day vulnerability during the Incursion phase?
- To perform a SQL injection on an internal server
- To extract sensitive information from the target
- To perform network discovery on the target
- To deliver malicious code that breaches the target
Correct answer: D
Explanation:
Reference: https://www.symantec.com/connect/blogs/guide-zero-day-exploits Reference: https://www.symantec.com/connect/blogs/guide-zero-day-exploits
