250-441 Administration of Symantec Advanced Threat Protection 3.0 Exam

Introduction
250-441 Administration of Symantec Advanced Threat Protection 3.0 exam is one of the top certification exams. It is designed by group of advanced level official certification experts. It covers all in depth concepts by following the official exam pattern and exam syllabus. This certification exam questions will give you the most realistic experience in the real world exam.

Exam Details:
This Exam contains multiple choices, multi selection and true or false questions.

Exam Time Limit: 90 Minutes

How this exam is useful to you?
This exam is intended for the people who are aspiring for 250-441 Administration of Symantec Advanced Threat Protection 3.0 Certification. It is designed exclusively as per the real certification exam so that certification aspirants can experience the touch of real-time exam. This will definitely help you to cross check your skills before attempting the main exam. This practice exam will evaluate your skills and give idea how far you are skillful in 250-441 Administration of Symantec Advanced Threat Protection 3.0 Certification exam.

Exam Details:
This Exam contains multiple choices, multi selection and true or false questions.

Exam Time Limit: 90 Minutes
Check the instructions before starting the exam:

Read the exam instructions carefully and follow them to avoid any issues while writing the exam.
· Check the exam time limit before you start the exam.
· It is highly recommended to have faster internet access.
· No power cut shall happen during the exam. Hence the power backup for your system/laptop.
· In case your system/laptop gets shut down abruptly due to power cut, internet connectivity issues or any other reasons, your exam will be ended and will be considered as one attempt completed.
· Exam browser window shall not be closed once exam starts otherwise exam will be ended abruptly and same with losing your attempt as well.
· While writing the exam, if you click on back button of the browser tab then your exam will be ended abruptly and attempt will be lost. Hence it is highly recommended not use to back button of the browser button while/after writing the exam.
· Once exam time is completed, exam will be submitted automatically. Hence it is recommended to keep checking the timer which will be available at the exam window.
· It is recommended to use the Google Chrome browser for better results of the application.

QUESTION 1
What is the second stage of an Advanced Persistent Threat (APT) attack?

A. Exfiltration
B. Incursion
C. Discovery
D. Capture

Correct Answer: B

QUESTION 2
Which SEP technology does an Incident Responder need to enable in order to enforce blacklisting on an endpoint?

A. System Lockdown
B. Intrusion Prevention System
C. Firewall
D. SONAR

Correct Answer: A

QUESTION 3
An Incident Responder wants to create a timeline for a recent incident using Syslog in addition to ATP for the
After Actions Report.
What are two reasons the responder should analyze the information using Syslog? (Choose two.)

A. To have less raw data to analyze
B. To evaluate the data, including information from other systems
C. To access expanded historical data
D. To determine what policy settings to modify in the Symantec Endpoint Protection Manager (SEPM)
E. To determine the best cleanup method

Correct Answer: BE

QUESTION 4
Which SEP technologies are used by ATP to enforce the blacklisting of files?

A. Application and Device Control
B. SONAR and Bloodhound
C. System Lockdown and Download Insight
D. Intrusion Prevention and Browser Intrusion Prevention

Correct Answer: C

QUESTION 5
What is the role of Insight within the Advanced Threat Protection (ATP) solution?

A. Reputation-based security
B. Detonation/sandbox
C. Network detection component
D. Event correlation

Correct Answer: A