An Incident Responder notices traffic going from an endpoint to an IRC channel. The endpoint is listed in an incident. ATP is configured in TAP mode.
What should the Incident Responder do to stop the traffic to the IRC channel?
A. Isolate the endpoint with a Quarantine Firewall policy
B. Blacklist the IRC channel IP
C. Blacklist the endpoint IP
D. Isolate the endpoint with an application control policy
|
Download Printable PDF. VALID exam to help you PASS. |
 |