250-441 Exam Dumps : Administration of Symantec Advanced Threat Protection 3.0

Use the isolation command in ATP to move endpoint to quarantine network.

Blacklist suspicious domain in the ATP manager.

Deploy a high-Security antivirus and Antispyware policy in the Symantec Endpoint protection Manager (SEPM.)

Create a firewall rule in the Symantec Endpoints Protection Manager (SEPM) or perimeter firewall that blocks

traffic to the domain.

Run a full system scan on all endpoints

It allows for Microsoft Incident Responders to assist in remediation

ATP can access the database using a log collector on the SEPM host

It allows for Symantec Incident Responders to assist in remediation

ATP can access the database without any special host system requirements

The endpoint automatically switches to using a Compliance location, where a Compliance policy is applied to the computer.

The endpoint automatically switches to using a System Lockdown location, where a System Lockdown

policy is applied to the computer.

The endpoint automatically switches to using a Host Integrity location, where a Host Integrity policy is

applied to the computer.

The endpoint automatically switches to using a Quarantine location, where a Quarantine policy is applied to the computer.