Question 1

What type of policy provides a second layer of defense, after the Symantec firewall?

Options :

A : Virus and Spyware

B : Host Integrity

C : Intrusion Prevention

D : System Lockdown

Answer: C

Question 2

What is the timeout for the file deletion command in SEDR?

Options :

A : 2 Days

B : 7 Days

C : 72 Hours

D : 5 Days

Answer: C

Question 3

What are the two (2) locations where an Incident Responder should gather data for an After Actions Report in SEDR? (Select two)

Options :

A : Incident Manager

B : Policies

C : Syslog

D : Action Manager

E : Endpoint Search

Answer: A,C

Question 4

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

Options :

A : Quarantine

B : Block

C : Deny List

D : Firewall

Answer: A

Question 5

Which type of file attribute is valid for creating a block list entry with Symantec Endpoint Detection and Response (SEDR)?

Options :

A : SHA256

B : Type

C : Date Created

D : Filename

Answer: A