Ace Your 250-441 Symantec Certified Specialist Exam

Administration of Symantec Advanced Threat Protection 3.0 Questions and Answers

Question 13

How does an attacker use a zero-day vulnerability during the Incursion phase?

To perform a SQL injection on an internal server

To extract sensitive information from the target

To perform network discovery on the target

To deliver malicious code that breaches the target

Question 14

An Incident Responder needs to remediate a group of endpoints but also wants to copy a potentially suspicious file to the ATP file store.

In which scenario should the Incident Responder copy a suspicious file to the ATP file store?

The responder needs to analyze with Cynic

The responder needs to isolate it from the network

The responder needs to write firewall rules

The responder needs to add the file to a whitelist