An administrator is reviewing risk logs in the Symantec Endpoint Protection Manager (SEPM) and notices that some entries list that the "Risk was partially removed". The administrator wants to determine whether additional steps are necessary to remediate the threat. How should the administrator proceed?
A) Review the threat writeup and run a full system scan on the machine.
B) Perform a repair of the Symantec Endpoint Protection install on the machine.
C) Submit infected file to Security Response to see if it is a new variant.
D) Change remediation actions in the Virus and Spyware Protection policy in the SEPM.

Question

Quizplus · Accepted Answer

The administrator should review the threat writeup to understand the nature of the threat and then run a full system scan to ensure that all components of the threat are detected and removed.

An Administrator Is Reviewing Risk Logs in the Symantec Endpoint