Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
Broadcom Exam 250-580 Topic 2 Question 14 Discussion
Actual exam question for
Broadcom's
250-580 exam
Question #: 14
Topic #: 2
[All 250-580 Questions]
Topic #: 2
An Incident Responder has determined that an endpoint is compromised by a malicious threat. What SEDR feature would be utilized first to contain the threat?
Suggested Answer:
C
When an Incident Responder determines that an endpoint is compromised, the first action to contain the threat is to use the Isolation feature in Symantec Endpoint Detection and Response (SEDR). Isolation effectively disconnects the affected endpoint from the network, thereby preventing the malicious threat from communicating with other systems or spreading within the network environment. This feature enables the responder to contain the threat swiftly, allowing further investigation and remediation steps to be conducted without risk of lateral movement by the attacker.
Johnathon
Pamella
1 days agoElli
2 days agoMy
3 days agoPamella
8 days agoAnnita
1 months agoIdella
1 months agoHana
11 days agoEdna
2 months agoWhitney
17 days agoBobbye
22 days agoMarvel
1 months agoBenton
1 months agoParis
1 months agoBrande
1 months ago