250-441 Exam Dumps - Administration of Symantec Advanced Threat Protection 3.0

Go to page:

Question # 4

A customer has information about a malicious file that has NOT entered the network. The customer wants to know whether ATP is already aware of this threat without having to introduce a copy of the file to the infrastructure.

Which approach allows the customer to meet this need?

Use the Cynic portal to check whether the MD5 hash triggers a detection from Cynic

Use the ATP console to check whether the SHA-256 hash triggers a detection from Cynic

Use the ATP console to check whether the MD5 hash triggers a detection from Cynic

Use the Cynic portal to check whether the SHA-256 hash triggers a detection from Cynic

Full Access

Question # 5

An Incident Responder has noticed that for the last month, the same endpoints have been involved with malicious traffic every few days. The network team also identified a large amount of bandwidth being used over P2P protocol.

Which two steps should the Incident Responder take to restrict the endpoints while maintaining normal use of the systems? (Choose two.)

Report the users to their manager for unauthorized usage of company resources

Blacklist the domains and IP associated with the malicious traffic

Isolate the endpoints

Blacklist the endpoints

Find and blacklist the P2P client application

Full Access

Question # 6

A large company has 150,000 endpoints with 12 SEP sites across the globe. The company now wants to

implement ATP: Endpoint to improve their security. However, a consultant recently explained that the company needs to implement more than one ATP manager.

Why does the company need more than one ATP manager?

An ATP manager can only connect to a SQL backend

An ATP manager can only support 30,000 SEP clients

An ATP manager can only support 10 SEP site connections.

An ATP manager needs to be installed at each location where a Symantec Endpoint Protection Manager (SEPM) is located.

Full Access

Question # 7

Which attribute is required when configuring the Symantec Endpoint Protection Manager (SEPM) Log

Collector?

SEPM embedded database name

SEPM embedded database type

SEPM embedded database version