Symantec Administration of Symantec Advanced Threat Protection 3.0 250-441 Exam Dumps: Updated Questions & Answers (October 2025)

Use the isolate command in ATP to move all endpoints to a quarantine network.

Blacklist suspicious domains in the ATP manager.

Deploy a High-Security Antivirus and Antispyware policy in the Symantec Endpoint Protection Manager (SEPM).

Create a firewall rule in the Symantec Endpoint Protection Manager (SEPM) or perimeter firewall that blocks traffic to the domain.

Run a full system scan on all endpoints.

To have a copy of the file policy enforcement

To test the effectiveness of the current assigned policy settings in the Symantec Endpoint Protection Manager (SEPM)

To create custom IPS signatures

To document and preserve any pieces of evidence associated with the incident

Database version

Database IP address

Database domain name

Database hostname

Database name

All tokens

Domainname, Filename, and Filehash

Filename, Filehash, and Registry

Domainname and Filename only

Isolate the endpoint with a Quarantine Firewall policy

Blacklist the IRC channel IP

Blacklist the endpoint IP

Isolate the endpoint with an application control policy

Blacklist

Whitelist

Delete file

Submit file to Cynic

To determine the best plan of action for cleaning up the infection

To isolate infected computers on the network and remediate the threat

To gather threat artifacts and review the malicious code in a sandbox environment

To access the current security plan, adjust where needed, and provide reference materials in the event of a similar incident

48 GB

64 GB

16 GB

32GB

Discovery

Capture

Exfiltration

Incursion

To perform a SQL injection on an internal server

To extract sensitive information from the target

To perform network discovery on the target

To deliver malicious code that breaches the target