An Incident Responder Launches a Search from ATP for a File

question 196

Multiple Choice

An Incident Responder launches a search from ATP for a file hash. The search returns the results immediately. The responder reviews the Symantec Endpoint Protection Manager (SEPM) command status and does NOT see an indicators of compromise (IOC) search command. How is it possible that the search returned results?

• A) The search runs and returns results in ATP and then displays them in SEPM.
• B) This is only an endpoint search.
• C) This is a database search; a command is NOT sent to SEPM for this type of search.
• D) The browser cached result from a previous search with the same criteria.

---

Definitions:

Servicing Materials

Supplies or materials used in the maintenance or repair of equipment.

Spending Variance

The difference between the budgeted amount of expense and the actual amount spent.

Fixed Cost

Costs that remain constant regardless of the level of production or sales activities, such as lease payments and management salaries.

Indirect Materials

Materials used in the production process that cannot be directly linked to a specific product.