A.Network Threat Analyzer

B.Evidence Table

C.Search and Investigate

D.SEP Policy Scanner

A.Endpoint memory usage logs

B.SEPM patch version history

C.SEP license keys

D.Involved endpoints, threat severity, and suggested actions

A.Centralized Exceptions only apply during scheduled scans

B.Administrator-defined scans can bypass SONAR protection

C.Administrator-defined scans enforce custom rules on unmanaged clients

D.Centralized Exceptions apply globally across policies, while scan exclusions apply only during defined scans

A.By counting the number of firewall blocks triggered per IP

B.By mapping events to MITRE ATT&CK stages and correlating artifacts

C.By assigning each endpoint to a specific investigation team

D.By comparing incident names to threat intelligence feeds

A.It hosts license keys and policy backups

B.It manages firewall rules across multiple SEPM sites

C.It forwards Syslog traffic to external log collectors

D.It acts as an alternative server that provides content updates to nearby clients