Download Administration of Symantec Advanced Threat Protection 3-0.Prep4sure.250-441.2018-12-06.1e.33q.vcex

Download Dump

File Info

Exam Administration of Symantec Advanced Threat Protection 3.0
Number 250-441
File Name Administration of Symantec Advanced Threat Protection 3-0.Prep4sure.250-441.2018-12-06.1e.33q.vcex
Size 21 Kb
Posted December 06, 2018
Downloaded 1



How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase
Coupon: EXAMFILESCOM

Coupon: EXAMFILESCOM
With discount: 20%





Demo Questions

Question 1
Why is it important for an Incident Responder to analyze an incident during the Recovery phase?

  • A: To determine the best plan of action for cleaning up the infection
  • B: To isolate infected computers on the network and remediate the threat
  • C: To gather threat artifacts and review the malicious code in a sandbox environment
  • D: To access the current security plan, adjust where needed, and provide reference materials in the event of a similar incident



Question 2
Which two database attributes are needed to create a Microsoft SQL SEP database connection? (Choose two.) 

  • A: Database version
  • B: Database IP address
  • C: Database domain name
  • D: Database hostname
  • E: Database name



Question 3
How does an attacker use a zero-day vulnerability during the Incursion phase?

  • A: To perform a SQL injection on an internal server
  • B: To extract sensitive information from the target
  • C: To perform network discovery on the target
  • D: To deliver malicious code that breaches the target



Question 4
Why is it important for an Incident Responder to review Related Incidents and Events when analyzing an incident for an After Actions Report?

  • A: It ensures that the Incident is resolved, and the responder can clean up the infection.
  • B: It ensures that the Incident is resolved, and the responder can determine the best remediation method.
  • C: It ensures that the Incident is resolved, and the threat is NOT continuing to spread to other parts of the environment.
  • D: It ensures that the Incident is resolved, and the responder can close out the incident in the ATP manager.



Question 5
What is the role of Cynic within the Advanced Threat Protection (ATP) solution?

  • A: Reputation-based security
  • B: Event correlation
  • C: Network detection component
  • D: Detonation/sandbox 



Question 6
Which section of the ATP console should an ATP Administrator use to create blacklists and whitelists?

  • A: Reports
  • B: Settings
  • C: Action Manager
  • D: Policies



Question 7
How should an ATP Administrator configure Endpoint Detection and Response according to Symantec best practices for a SEP environment with more than one domain?

  • A: Create a unique Symantec Endpoint Protection Manager (SEPM) domain for ATP
  • B: Create an ATP manager for each Symantec Endpoint Protection Manager (SEPM) domain
  • C: Create a Symantec Endpoint Protection Manager (SEPM) controller connection for each domain
  • D: Create a Symantec Endpoint Protection Manager (SEPM) controller connection for the primary domain



Question 8
Where can an Incident Responder view Cynic results in ATP?

  • A: Events
  • B: Dashboard
  • C: File Details
  • D: Incident Details



Question 9
An Incident Responder wants to investigate whether msscrt.pdf resides on any systems. 
Which search query and type should the responder run? 

  • A: Database search filename “msscrt.pdf”
  • B: Database search msscrt.pdf
  • C: Endpoint search filename like msscrt.pdf
  • D: Endpoint search filename =“msscrt.pdf”



Question 10
What is the earliest stage at which a SQL injection occurs during an Advanced Persistent Threat (APT) attack?

  • A: Exfiltration
  • B: Incursion
  • C: Capture
  • D: Discovery









CONNECT US


ProfExam
PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount..

Get Now!


HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen



HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset