QUESTION: 21

An administrator suspects that several computers have become part of a botnet.
What should the administrator do to detect botnet activity on the network?

Enable the Command and Control Server Firewall
Add botnet related signatures to the IPS policy's Audit Signatures list
Enable the IPS policy's Show notification on the device setting
Set the Antimalware policy's Monitoring Level to 4

Answer(s): A

Reveal Solution Next Question

QUESTION: 22

Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

Sandbox
SONAR
Reputation
Emulator

Answer(s): A

Reveal Solution Next Question

QUESTION: 23

An endpoint is offline, and the administrator issues a scan command.
What happens to the endpoint when it restarts, if it lacks connectivity?

The system is scanning when started.
The system downloads the content without scanning.
The system starts without scanning.
The system scans after the content update is downloaded.

Answer(s): B

Reveal Solution Next Question

QUESTION: 24

Which type of security threat is used by attackers to exploit vulnerable applications?

Lateral Movement
Privilege Escalation
Command and Control
Credential Access

Answer(s): B

Reveal Solution Next Question

Free 250-561 Exam Braindumps (page: 6)

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24