Helping Hand Questions for 250-441

Administration of Symantec Advanced Threat Protection 3.0 Questions and Answers

Question 9

Which stage of an Advanced Persistent Threat (APT) attack do attackers break into an organization’s network

to deliver targeted malware?

Incursion

Discovery

Capture

Exfiltration

Question 10

An Incident Responder runs an endpoint search on a client group with 100 endpoints. After one day, the

responder sees the results for 90 endpoints.

What is a possible reason for the search only returning results for 90 of 100 endpoints?

The search expired after one hour

10 endpoints are offline

The search returned 0 results on 10 endpoints

10 endpoints restarted and cancelled the search

Question 11

Which prerequisite is necessary to extend the ATP: Network solution service in order to correlate email

detections?

Email Security.cloud

Web security.cloud

Skeptic

Symantec Messaging Gateway

Question 12

Which best practice does Symantec recommend with the Endpoint Detection and Response feature?

Create a unique Cynic account to provide to ATP

Create a unique Symantec Messaging Gateway account to provide to ATP

Create a unique Symantec Protection Manager (SEPM) administrator account to provide to ATP

Create a unique Email Security.cloud portal account to provide to ATP