250-441 Exam Dumps : Administration of Symantec Advanced Threat Protection 3.0

It allows for Microsoft Incident Responders to assist in remediation

ATP can access the database using a log collector on the SEPM host

It allows for Symantec Incident Responders to assist in remediation

ATP can access the database without any special host system requirements

Use the isolation command in ATP to move endpoint to quarantine network.

Blacklist suspicious domain in the ATP manager.

Deploy a high-Security antivirus and Antispyware policy in the Symantec Endpoint protection Manager (SEPM.)

Create a firewall rule in the Symantec Endpoints Protection Manager (SEPM) or perimeter firewall that blocks

traffic to the domain.

Run a full system scan on all endpoints

Incursion

Discovery

Capture

Exfiltration