An Incident Responder wants to create a timeline for a recent incident using Syslog in...

Symantec 250-441 Question Answer

An Incident Responder wants to create a timeline for a recent incident using Syslog in addition to ATP for the

After Actions Report.

What are two reasons the responder should analyze the information using Syslog? (Choose two.)

To have less raw data to analyze

To evaluate the data, including information from other systems

To access expanded historical data

To determine what policy settings to modify in the Symantec Endpoint Protection Manager (SEPM)

To determine the best cleanup method

Symantec 250-441 Summary

Price: $52.5 ~~$149.99~~