Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Symantec Certified Specialist 250-441 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.
Exam 250-441 Premium Access

View all detail and faqs for the 250-441 exam

Go to Exam

726 Students Passed

84% Average Score

98% Same Questions
Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions
Questions # 11:

Which two steps must an Incident Responder take to isolate an infected computer in ATP? (Choose two.)

Options:

A.

Close any open shares

B.

Identify the threat and understand how it spreads

C.

Create subnets or VLANs and configure the network devices to restrict traffic

D.

Set executables on network drives as read only

E.

Identify affected clients

Questions # 12:

Which SEP technologies are used by ATP to enforce the blacklisting of files?

Options:

A.

Application and Device Control

B.

SONAR and Bloodhound

C.

System Lockdown and Download Insight

D.

Intrusion Prevention and Browser Intrusion Prevention

Questions # 13:

Which service is the minimum prerequisite needed if a customer wants to purchase ATP: Email?

Options:

A.

Email Protect (antivirus and anti-spam)

B.

Email Safeguard (antivirus, anti-spam, encryption, data protection and image control)

C.

Symantec Messaging Gateway

D.

Skeptic

Questions # 14:

An Incident Responder observers and incident with multiple malware downloads from a malicious domain. The domain in question belongs to one of the organization suppliers. The organization to the site to continue placing orders. Network is configured in Inline Block mode?

How should the Incident responder proceed?

Options:

A.

Whitelist the domain and close the incident as a false positive

B.

Identify the pieces of malware and blacklist them, then notify the supplier

C.

Blacklist the domain and IP of the attacking site

D.

Notify the supplier and block the site on the external firewall

Questions # 15:

What is the second stage of an Advanced Persistent Threat (APT) attack?

Options:

A.

Exfiltration

B.

Incursion

C.

Discovery

D.

Capture

Questions # 16:

An Incident responder added a files NDS hash to the blacklist.

Which component of SEP enforces the blacklist?

Options:

A.

Bloodhound

B.

System Lockdown

C.

Intrusion Prevention

D.

SONAR

Questions # 17:

What are two policy requirements for using the Isolate and Rejoin features in ATP? (Choose two.)

Options:

A.

Add a Quarantine firewall policy for non-compliant and non-remediated computers.

B.

Add a Quarantine LiveUpdate policy for non-compliant and non-remediated computers.

C.

Add and assign an Application and Device Control policy in the Symantec Endpoint Protection Manager

(SEPM).

D.

Add and assign a Host Integrity policy in the Symantec Endpoint Protection Manager (SEPM).

E.

Add a Quarantine Antivirus and Antispyware policy for non-compliant and non-remediated computers.

Questions # 18:

What are the prerequisite products needed when deploying ATP: Endpoint, Network, and Email?

Options:

A.

SEP and Symantec Messaging Gateway

B.

SEP, Symantec Email Security.cloud, and Security Information and Event Management (SIEM)

C.

SEP and Symantec Email Security.cloud

D.

SEP, Symantec Messaging Gateway, and Symantec Email Security.cloud

Questions # 19:

What is the role of Vantage within the Advanced Threat Protection (ATP) solution?

Options:

A.

Network detection component

B.

Event correlation

C.

Reputation-based security

D.

Detonation/sandbox

Questions # 20:

Which prerequisite is necessary to extend the ATP: Network solution service in order to correlate email

detections?

Options:

A.

Email Security.cloud

B.

Web security.cloud

C.

Skeptic

D.

Symantec Messaging Gateway

Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions
TOP CODES

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25
ADM-201
Agentforce-Specialist
CMMC-CCP
Data-Cloud-Consultant
PDI
PSE-Strata-Pro-24
Secure-Software-Design
Sharing-and-Visibility-Architect
Workday-Pro-Integrations
ZDTA