During a Recent Virus Outbreak, an Incident Responder Found That

Multiple Choice

During a recent virus outbreak, an Incident Responder found that the Incident Response team was successful in identifying malicious domains that were communicating with the infected endpoints. Which two options should the Incident Responder select to prevent endpoints from communicating with malicious domains? (Select two.)

A) Use the isolate command in ATP to move all endpoints to a quarantine network.
B) Blacklist suspicious domains in the ATP manager.
C) Deploy a High-Security Antivirus and Antispyware policy in the Symantec Endpoint Protection Manager (SEPM) .
D) Create a firewall rule in the Symantec Endpoint Protection Manager (SEPM) or perimeter firewall that blocks traffic to the domain.
E) Run a full system scan on all endpoints.