Free 250-441 Exam Dumps Preview

An organization has five (5) shops with a few endpoints and a large warehouse where 98% of all computers are located. The shops are connected to the warehouse using leased lines and access internet through the warehouse network.

How should the organization deploy the network scanners to observe all inbound and outbound traffic based on Symantec best practices for Inline mode?

Which detection method identifies a file as malware after SEP has queried the file's reputation?

An Incident Responder added a file's MD5 hash to the blacklist.

Which component of SEP enforces the blacklist?

Which attribute is required when configuring the Symantec Endpoint Protection Manager (SEPM) Log Collector?

Which final steps should an Incident Responder take before using ATP to rejoin a remediated endpoint to the network, according to Symantec best practices?

An Incident Responder runs an endpoint search on a client group with 100 endpoints. After one day, the responder sees the results for 90 endpoints.

What is a possible reason for the search only returning results for 90 of 100 endpoints?

Which two widgets can an Incident Responder use to isolate breached endpoints from the Incident details page? (Choose two.)

An Incident Responder wants to investigate whether msscrt.pdf resides on any systems.

Which search query and type should the responder run?

An organization is considering an ATP: Endpoint and Network deployment with multiple appliances.

Which form factor will be the most effective in terms of performance and costs?

Which two actions can an Incident Responder take in the Cynic portal? (Choose two.)

Where can an Incident Responder view Cynic results in ATP?

An ATP Administrator has deployed ATP: Network, Endpoint, and Email and now wants to ensure that all connections are properly secured.

Which connections should the administrator secure with signed SSL certificates?

Which two questions can an Incident Responder answer when analyzing an incident in ATP? (Choose two.)

Which National Institute of Standards and Technology (NIST) cybersecurity function is defined as "finding incursions"?

Which stage of an Advanced Persistent Threat (APT) attack do attackers send information back to the home base?