Want to pass your Administration of Symantec Advanced Threat Protection 3.0 250-441 exam in the very first attempt? Try Pass2lead! It is equally effective for both starters and IT professionals.
VCE
What is the second stage of an Advanced Persistent Threat (APT) attack?
A. Exfiltration
B. Incursion
C. Discovery
D. Capture
Refer to the exhibit. An Incident Responder wants to see what was detected on a specific day by the IPS engine.
Which item must the responder choose from the drop-down menu?

A. Insight
B. Cynic
C. Vantage
D. Blacklist
An organization has five (5) shops with a few endpoints and a large warehouse where 98% of all computers are located. The shops are connected to the warehouse using leased lines and access internet through the warehouse network.
How should the organization deploy the network scanners to observe all inbound and outbound traffic based on Symantec best practices for Inline mode?
A. Deploy a virtual network scanner at each shop
B. Deploy a virtual network scanner at the warehouse and a virtual network scanner at each shop
C. Deploy a physical network scanner at each shop
D. Deploy a physical network scanner at the warehouse gateway