最新的Symantec 250-580免費考試真題

問題1

When a SEPM is enrolled in ICDm, which policy can only be managed from the cloud?

A. Network Intrusion Prevention

B. LiveUpdate

C. Intensive Protection

D. Firewall

正確答案: A

說明：（僅 Fast2test 成員可見）

問題2

What characterizes an emerging threat in comparison to the traditional threat?

A. Emerging threats are more sophisticated than traditional threats.

B. Emerging threats are undetectable by signature-based engines.

C. Emerging threats require artificial intelligence to be detected.

D. Emerging threats use new techniques and 0-day vulnerability to propagate.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

Which alert rule category includes events that are generated about the cloud console?

A. System

B. Security

C. Application Activity

D. Diagnostic

正確答案: A

說明：（僅 Fast2test 成員可見）

問題4

A Symantec Endpoint Protection (SEP) administrator receives multiple reports that machines are experiencing performance issues. The administrator discovers that the reports happen at about the same time as the scheduled LiveUpdate.
Which setting should the SEP administrator configure to minimize I/O when LiveUpdate occurs?

A. Disable Run an Active Scan when new definitions arrive

B. Change the Administrator-defined scan schedule

C. Disable Allow user-defined scans to run when the scan author is logged off

D. Change the LiveUpdate schedule

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

Which action does SONAR take before convicting a process?

A. Blocks suspicious behavior

B. Checks the reputation of the process

C. Restarts the system

D. Quarantines the process

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Which action is provided by Symantec EDR for the rapid remediation of impacted endpoints?

A. Block Listing or Allow Listing of specific files

B. Detonate Memory Exploits in conjunction with SEP

C. Automatically stopping suspicious behaviors & unknown threats

D. Quickly filtering for specific attributes

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

What does a medium-priority incident indicate?

A. The incident does not affect critical business operation

B. The incident may have an impact on the business

C. The incident can result in a business outage

D. The incident can safely be ignored

正確答案: B

說明：（僅 Fast2test 成員可見）

問題8

How would an administrator specify which remote consoles and servers have access to the management server?

A. EdittheExternal Communication Settingsfor the Group under theClients tab.

B. Edit theCommunication Settingsfor the Group under theClients tab.

C. Edit theSite Propertiesand under theGeneral tab,change the server priority.

D. Edit theServer Propertiesand under theGeneral tab,change theServer Communication Permission.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題9

An administrator is investigating a possible threat that occurs during the Windows startup. A file is observed that is NOT digitally signed by Microsoft. Which Anti-malware feature should the administrator enable to scan this file for threats?

A. Enable Early Launch Antimalware

B. Enable Microsoft ELAM

C. Enable Auto-Protect

D. Enable Behavioral Analysis

正確答案: A

說明：（僅 Fast2test 成員可見）

問題10

What methods should an administrator utilize to restore communication on a client running SEP for Mac?

A. Use SSH and run the command:

B. Use Third Party Deployment to push out a communications package.

C. sudo launchct1 load /Library/LaunchDaemons/eom.Symantec.symdaemon.'plist

D. Use the Sylink Drop Tool on the SEPM.

E. Use Client Deployment Wizard to push out a communications package.

正確答案: E

說明：（僅 Fast2test 成員可見）

問題11

What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

A. Each customer can have one domain and many tenants

B. A tenant can contain multiple domains

C. A domain can contain multiple tenants

D. Each customer can have one tenant and no domains

正確答案: B

說明：（僅 Fast2test 成員可見）

問題12

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

A. Block

B. Deny List

C. Firewall

D. Quarantine

正確答案: D

說明：（僅 Fast2test 成員可見）

問題13

What EDR feature provides endpoint activity recorder data for a file hash?

A. Full Dump

B. Entity Dump

C. Process Dump

D. Hash Dump

正確答案: B

說明：（僅 Fast2test 成員可見）

問題14

Where in the Attack Chain does Threat Defense for Active Directory provide protection?

A. Attack Surface Reduction

B. Breach Prevention

C. Detection and Response

D. Attack Prevention

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Symantec Endpoint Security Complete - Administration R2 - 250-580免費考試真題

聯系我們

站內鏈接

最新更新