250-441 試験問題を無料オンラインアクセス

Which threat is an example of an Advanced Persistent Threat (APT)?

• A.Flamer
• B.Creeper
• C.Brain
• D.Koobface

Refer to the exhibit. An Incident Responder wants to see what was detected on a specific day by the IPS engine.
Which item must the responder choose from the drop-down menu?

• A.Cynic
• B.Insight
• C.Vantage
• D.Blacklist

Which two tasks should an Incident Responder complete when recovering from an incident? (Choose two.)

• A.Submit any suspicious files to Cynic
• B.Blacklist any suspicious files found in the environment
• C.Rejoin healthy endpoints back to the network
• D.Delete threat artifacts from the environment
• E.Isolate infected endpoints to a quarantine network

Which two ATP control points are able to report events that are detected using Vantage?

What occurs when an endpoint fails its Host Integrity check and is unable to remediate?

• A.The endpoint automatically switches to using a Host Integrity location, where a Host Integrity policy is applied to the computer.
• B.The endpoint automatically switches to using a System Lockdown location, where a System Lockdown policy is applied to the computer.
• C.The endpoint automatically switches to using a Compliance location, where a Compliance policy is applied to the computer.
• D.The endpoint automatically switches to using a Quarantine location, where a Quarantine policy is applied to the computer.