Question 1

Which EDR feature is used to search for real-time indicators of compromise?

Options :

A : Domain search

B : Endpoint search

C : Cloud Database search

D : Device Group search

Answer: B

Question 2

What is the difference between running Device Control for a Mac versus Windows?

Options :

A : Mac Device Control runs at thedriver level.It enforces control only on Apple supported devices.

B :

Mac Device Control runs at thevolume level.It enforces control only on storage devices. OC.Mac Device Control runs at thekernel level.It enforces control only on built-in devices.

C : Mac Device Control runs at theuser level.It enforces control only on iCIoud storage.

Answer: B

Question 3

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

Options :

A : Quarantine

B : Block

C : Deny List

D : Firewall

Answer: A

Question 4

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

Options :

A : Quarantine

B : Block

C : Deny List

D : Firewall

Answer: A

Question 5

A company uses a remote administration tool that is detected as Hacktool.KeyLoggPro and quarantined by Symantec Endpoint Protection (SEP). Which step can an administrator perform to continue using the remote administration tool without detection by SEP?

Options :

A : Create a Tamper Protect exception for the tool

B : Create an Application to Monitor exception for the tool

C : Create a Known Risk exception for the tool

D : Create a SONAR exception for the tool

Answer: C