You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?
Correct - https://www.juniper.net/documentation/en_US/release-independent/jatp/information-products/pathway-pages/jatp-operators-guide.pdf pg 43 YARA Rules and Lateral Detection
Remote Administration Tools (RATs) can be detected using YARA rules. By adding the ability to push YARA rules to Juniper ATP Appliance devices, Juniper ATP Appliance can detect the lateral spread of Remote Administration Tools (RATs) within a network.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TheDude
3 months ago