Real 250-561 Exam PDF Test Engine Practice Test Questions

Symantec 250-561 Real 2023 Braindumps Mock Exam Dumps

Symantec 250-561 certification exam is intended for IT professionals who are responsible for managing endpoint security solutions in their organizations. This includes system administrators, security analysts, security engineers, and IT managers. Endpoint Security Complete - Administration R1 certification exam covers various topics related to endpoint security, including endpoint protection, threat prevention, incident response, and compliance.

 

NEW QUESTION # 30
Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?

• A. The LiveUpdate Policy
• B. The Firewall Policy
• C. The System Policy
• D. The System Schedule Policy

Answer: A

NEW QUESTION # 31
Which option should an administrator utilize to temporarily or permanently block a file?

• A. Blacklist
• B. Hide
• C. Delete
• D. Encrypt

Answer: A

NEW QUESTION # 32
Wh.ch Firewall rule components should an administrator configure to block facebook.com use during business hours?

• A. Application, Host(s), and Network Service
• B. Action, Application, and Schedule
• C. Action, Hosts(s), and Schedule
• D. Host(s), Network Interface, and Network Service

Answer: C

NEW QUESTION # 33
In the ICDm, administrators are assisted by the My Task view. Which automation type creates the tasks within the console?

• A. Advanced Machine Learning
• B. Artificial Intelligence
• C. Administrator defined rules
• D. Machine Learning

Answer: B

NEW QUESTION # 34
Which IPS Signature type is Primarily used to identify specific unwanted traffic?

• A. Attack
• B. Probe
• C. Malcode
• D. Audit

Answer: A

NEW QUESTION # 35
What version number is assigned to a duplicated policy?

• A. The original policy's number plus one
• B. The original policy's version numb
• C. One
• D. Zero

Answer: A

NEW QUESTION # 36
Which SES security control protects against threats that may occur in the Impact phase?

• A. Antimalware
• B. Firewall
• C. Device Control
• D. IPS

Answer: B

NEW QUESTION # 37
Which file should an administrator create, resulting Group Policy Object (GPO)?

• A. Symantec__Agent_package_x64.exe
• B. Symantec__Agent_package__32-bit.msi
• C. Symantec__Agent_package_x64.zip
• D. Symantec__Agent_package_x64.msi

Answer: B

NEW QUESTION # 38
Which statement best describes Artificial Intelligence?

• A. A program that is autonomous and needs training to perform a task
• B. A program that automates tasks with a static set of instructions
• C. A program that can predict when a task should be performed
• D. A program that learns from experience and perform autonomous tasks

Answer: B

NEW QUESTION # 39
An endpoint is offline, and the administrator issues a scan command. What happens to the endpoint when it restarts, if it lacks connectivity?

• A. The system is scanning when started.
• B. The system starts without scanning.
• C. The system scans after the content update is downloaded.
• D. The system downloads the content without scanning.

Answer: D

NEW QUESTION # 40
Which framework, open and available to any administrator, is utilized to categorize adversarial tactics and for each phase of a cyber attack?

• A. MITRE ATT&CK
• B. MITRE ATTACK MATRIX
• C. MITRE ADV&NCE
• D. MITRE RESPONSE

Answer: C

NEW QUESTION # 41
What does SES's advanced search feature provide when an administrator searches for a specific term?

• A. A search summary dialog
• B. A search wizard dialog
• C. A search modifier dialog
• D. A suggested terms dialog

Answer: C

NEW QUESTION # 42
The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?

• A. Reputation
• B. Antimalware
• C. IPS
• D. Firewall

Answer: B

NEW QUESTION # 43
What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

• A. The endpoint is more exposed to threats
• B. The endpoint fails to receive content update
• C. The endpoint is missing timely policy update
• D. The endpoint is absent of the management console

Answer: B

NEW QUESTION # 44
Which antimalware intensity level is defined by the following: "Blocks files that are most certainly bad or potentially bad files. Results in a comparable number of false positives and false negatives."

• A. Level 5
• B. Level 2
• C. Level 1
• D. Level 6

Answer: D

NEW QUESTION # 45
Which two (2) scan range options are available to an administrator for locating unmanaged endpoints? (Select two)

• A. Entire Network
• B. Subnet Range
• C. Entire Subnet
• D. IP range within network
• E. IP range within subnet

Answer: B,D

NEW QUESTION # 46
Which report template includes a summary of risk distribution by devices, users, and groups?

• A. Weekly
• B. Comprehensive
• C. Threat Distribution
• D. Device Integrity

Answer: C

NEW QUESTION # 47
Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)

• A. Add endpoints to a high security group and assign a restrictive Antimalware policy to the group
• B. Confirm that daily active and weekly full scans take place on all endpoints
• C. Use Power Eraser to clean endpoint Windows registries
• D. Verify that all endpoints receive scheduled Live-Update content
• E. Quarantine affected endpoints

Answer: C,E

NEW QUESTION # 48
Which two (2) skill areas are critical to the success of incident Response Teams (Select two)

• A. Threat Analysis
• B. Incident Response
• C. Incident Management
• D. Project Management
• E. Cyber Intelligence

Answer: B,E

NEW QUESTION # 49
An administrator learns of a potentially malicious file and wants to proactively prevent the file from ever being executed.
What should the administrator do?

• A. Add the filename and SHA-256 hash to a Blacklist policy
• B. Increase the Antimalware policy Intensity to Level 5
• C. Adjust the Antimalware policy age and prevalence settings
• D. Add the file SHA1 to a blacklist policy

Answer: C

NEW QUESTION # 50
What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

• A. A domain can contain multiple tenants
• B. Each customer can have one tenant and many domains
• C. Each customer can have one domain and many tenant
• D. A tenant can contain multiple domains

Answer: D

NEW QUESTION # 51
Files are blocked by hash in the blacklist policy.
Which algorithm is supported, in addition to MD5?

• A. MD5 "Salted"
• B. SHA256 "salted"
• C. SHA256
• D. SHA2

Answer: C

NEW QUESTION # 52
Which type of security threat is used by attackers to exploit vulnerable applications?

• A. Lateral Movement
• B. Credential Access
• C. Privilege Escalation
• D. Command and Control

Answer: C

NEW QUESTION # 53
Which device page should an administrator view to track the progress of an issued device command?

• A. Recent Activity
• B. Command History
• C. Command Status
• D. Activity Update

Answer: A

NEW QUESTION # 54
Which Security Control dashboard widget should an administrator utilize to access detailed areas for a given security control ?

• A. Quick Links
• B. More Info
• C. Learn More
• D. Latest Tasks

Answer: D

NEW QUESTION # 55
......

Prepare For The 250-561 Question Papers In Advance: https://www.testsimulate.com/250-561-study-materials.html