An Incident Responder wants to run a database search that will list all client named starting with SYM.
Which syntax should the responder use?
Which action should an Incident Responder take to remediate false positives, according to Symantec best
practices?
Which two non-Symantec methods for restricting traffic are available to the Incident Response team? (Choose two.)
Which detection method identifies a file as malware after SEP has queried the file's reputation?
Which two database attributes are needed to create a Microsoft SQL SEP database connection? (Choose
two.)
During a recent virus outbreak, an Incident Responder found that the Incident Response team was successful in identifying malicious domains that were communicating with the infected endpoints.
Which two options should the Incident Responder select to prevent endpoints from communicating with malicious domains? (Select two.)
Why is it important for an Incident Responder to review Related Incidents and Events when analyzing an
incident for an After Actions Report?
An Incident Responder wants to create a timeline for a recent incident using Syslog in addition to ATP for the
After Actions Report.
What are two reasons the responder should analyze the information using Syslog? (Choose two.)
While filling out the After Actions Report, an Incident Response Team noted that improved log monitoring could help detect future breaches.
What are two examples of how an organization can improve log monitoring to help detect future breaches? (Choose two.)
Which National Institute of Standards and Technology (NIST) cybersecurity function includes Risk Assessment or Risk Management Strategy?
DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.
TESTED 23 Nov 2024
