250-441 試験問題を無料オンラインアクセス

Which policies are required for the quarantine feature of ATP to work?

• A.Host Integrity Policy and Quarantine Policy
• B.Firewall Policy and Host Integrity Policy
• C.Quarantine Policy and Firewall Policy
• D.Quarantine and Intrusion Prevention Policy

An ATP Administrator set up ATP: Network in TAP mode and has placed URLs on the blacklist.
What will happen when a user attempts to access one of the blacklisted URLs?

• A.Access to the website is blocked by the network scanner and a network event is generated
• B.Access to the website is blocked by the network scanner but an event is NOT generated
• C.Access to the website is allowed by the network scanner but a network event is generated
• D.Access to the website is allowed by the network scanner but blocked by ATP: Endpoint and an endpoint event is generated

Which section of the ATP console should an ATP Administrator use to evaluate prioritized threats within the environment?

• A.Incident Manager
• B.Events
• C.Search
• D.Action Manager

Which National Institute of Standards and Technology (NIST) cybersecurity function is defined as "finding incursions"?

• A.Protect
• B.Identify
• C.Detect
• D.Respond

An Incident Responder wants to investigate whether msscrt.pdf resides on any systems.
Which search query and type should the responder run?

• A.Endpoint search filename like msscrt.pdf
• B.Endpoint search filename ="msscrt.pdf"
• C.Database search msscrt.pdf
• D.Database search filename "msscrt.pdf"