ATP Detects a Threat Phoning Home to a Command and Control

question 392

Multiple Choice

ATP detects a threat phoning home to a command and control server and creates a new incident. The threat is NOT being detected by SEP, but the Incident Response team conducted an indicators of compromise (IOC) search for the machines that are contacting the malicious sites to gather more information. Which step should the Incident Response team incorporate into their plan of action?

• A) Perform a healthcheck of ATP
• B) Create firewall rules in the Symantec Endpoint Protection Manager (SEPM) and the perimeter firewall
• C) Use ATP to isolate non-SEP protected computers to a remediation VLAN
• D) Rejoin the endpoints back to the network after completing a final virus scan

---

Definitions:

Corn

A cereal plant (Zea mays) that produces large kernels on a cob; also used to refer to the kernels themselves, which are a staple food in many parts of the world.

Natural Ecosystems

Natural ecosystems are biological communities that interact with their physical environment, functioning through naturally occurring processes without significant human intervention.

Dead Organic Material

Non-living plant and animal matter that has not yet decayed, providing nutrients and energy sources for decomposers in ecosystems.

Recycle

The process of collecting and processing materials that would otherwise be thrown away as trash and turning them into new products.