During a recent virus outlook, an Incident found that the incident Response team was successful in identifying malicious that were communicating with the infected endpoint.

Which two (2) options should be incident Responder select to prevent endpoints from communicating with malicious domains?

Which stage of an Advanced Persistent Threat (APT) attack do attackers send information back to the home base?

Which prerequisite is necessary to extend the ATP: Network solution service in order to correlate email

detections?