250-441 Exam Dumps : Administration of Symantec Advanced Threat Protection 3.0

An Incident Responder runs an endpoint search on a client group with 100 endpoints. After one day, the

responder sees the results for 90 endpoints.

What is a possible reason for the search only returning results for 90 of 100 endpoints?

Which stage of an Advanced Persistent Threat (APT) attack do attackers map an organization’s defenses from the inside?

An Incident Responder needs to remediate a group of endpoints but also wants to copy a potentially suspicious file to the ATP file store.

In which scenario should the Incident Responder copy a suspicious file to the ATP file store?