An Incident Responder needs to remediate a group of endpoints but also wants to copy...

Symantec 250-441 Question Answer

An Incident Responder needs to remediate a group of endpoints but also wants to copy a potentially suspicious file to the ATP file store.

In which scenario should the Incident Responder copy a suspicious file to the ATP file store?

The responder needs to analyze with Cynic

The responder needs to isolate it from the network

The responder needs to write firewall rules

The responder needs to add the file to a whitelist

250-441 PDF/Engine

Get 60% Discount on All Products, Use Coupon: "8w52ceb345"