Free Symantec 250-441 Exam Dumps Questions & Answers

Which stage of an Advanced Persistent Threat (APT) attack do attackers break into an organization's network to deliver targeted malware?

• A.  Discovery
• B.  Exfiltration
• C.  Capture
• D.  Incursion

What is the main constraint an ATP Administrator should consider when choosing a network scanner model?

• A.  Bandwidth
• B.  Number of users
• C.  Throughput
• D.  Link speed

Which threat is an example of an Advanced Persistent Threat (APT)?

• A.  ILOVEYOU
• B.  Conficker
• C.  GhostNet
• D.  MyDoom

Which final steps should an Incident Responder take before using ATP to rejoin a remediated endpoint to the network, according to Symantec best practices?

• A.  Upgrade the client to the latest version of SEP. Once the client is upgraded, rejoin the computer to the production network.
• B.  Run Windows Update to patch the system with the latest service pack. Once the system is up-to-date, rejoin the computer to the production network.
• C.  Run an additional antivirus scan with the latest definitions. If the scan comes back as clean, rejoin the computer to the production network.
• D.  Use SymDiag to run a Threat Scan Analysis on the machine. Once the analysis comes back as clean, rejoin the computer to the production network.

Why is it important for an Incident Responder to review Related Incidents and Events when analyzing an incident for an After Actions Report?

• A.  It ensures that the Incident is resolved, and the responder can clean up the infection.
• B.  It ensures that the Incident is resolved, and the threat is NOT continuing to spread to other parts of the environment.
• C.  It ensures that the Incident is resolved, and the responder can determine the best remediation method.
• D.  It ensures that the Incident is resolved, and the responder can close out the incident in the ATP manager.