250-550 Administration of Symantec Endpoint Security – R1 Questions

Administration of Symantec Endpoint Security – R1 250-550 exam questions are online, which are good and helpful for you to pass. In real Symantec certification 250-550 exam, there are 65-75 questions, and you have 90 minutes to write the test. The required passing score of Symantec 250-550 exam is 70%. The available language is English. Free Symantec certification 250-550 exam questions are available below.

Page 1 of 3

1. What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

A tenant can contain multiple domains

A domain can contain multiple tenants

Each customer can have one domain and many tenant

Each customer can have one tenant and many domains

 Loading...

2. Which Symantec component is required to enable two factor authentication with VIP on the Integrated Cyber Defense manager (ICDm)?

A physical token or a software token

A software token and a VIP server

A software token and an active directory account

A physical token or a secure USB key

 Loading...

3. Wh.ch Firewall rule components should an administrator configure to block facebook.com use during business hours?

Action, Hosts(s), and Schedule

Action, Application, and Schedule

Host(s), Network Interface, and Network Service

Application, Host(s), and Network Service

 Loading...

4. Which file property does SES utilize to search the VirusTotal website for suspicious file information?

File reputation

File size

File name

File hash

 Loading...

5. Which report template includes a summary of risk distribution by devices, users, and groups?

Device Integrity

Threat Distribution

Comprehensive

Weekly

 Loading...

6. Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?

The Firewall Policy

The System Schedule Policy

The System Policy

The LiveUpdate Policy

 Loading...

7. What happens when an administrator blacklists a file?

The file is assigned to the Blacklist task list

The file is automatically quarantined

The file is assigned to a chosen Blacklist policy

The file is assigned to the default Blacklist policy

 Loading...

8. 1.What does an end-user receive when an administrator utilizes the Invite User feature to distribute the SES client?

An email with a link to directly download the SES client

An email with a link to a KB article explaining how to install the SES Agent

An email with the SES_setup.zip file attached

An email with link to register on the ICDm user portal

 Loading...

9. A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.

Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?

SONAR

Sapient

IPS

Emulator

 Loading...

10. The ICDm has generated a blacklist task due to malicious traffic detection .

Which SES component was utilized to make that detection?

Antimalware

Reputation

Firewall

IPS

 Loading...

Page 2 of 3

11. Which statement best defines Machine Learning?

A program that needs user input to perform a task.

A program that teams from observing other programs.

A program that learns from experience to optimize the output of a task.

A program that require data to perform a task.

 Loading...

12. Why would an administrator choose the Server-optimized installation option when creating an installation package?

To limit the Intrusion Prevention policy to use server-only signatures.

To add the Server-optimized Firewall policy

To add the SES client's Optimize Memory setting to the default server installation.

To reduce the SES client's using resources that are required for other server-specific processes.

 Loading...

13. What are two (2) benefits of a fully cloud managed endpoint protection solution? (Select two)

Increased content update frequency

Increased visibility

Reduced 3rd party licensing cost

Reduced database usage

Reduced network usage

 Loading...

14. Which report template type should an administrator utilize to create a daily summary of network threats detected?

Network Risk Report

Blocked Threats Report

Intrusion Prevention Report

Access Violation Report

 Loading...

15. Which type of organization is likely to be targeted with emerging threats?

Small organization with externalized managed security

Large organizations with dedicated security teams

Large organization with high turnover

Small organization with little qualified staff

 Loading...

16. Which alert rule category includes events that are generated about the cloud console?

Security

Diagnostic

System

Application Activity

 Loading...

17. Which two (2) skill areas are critical to the success of incident Response Teams (Select two)

Project Management

Incident Management

Cyber Intelligence

Incident Response

Threat Analysis

 Loading...

18. Which communication method is utilized within SES to achieve real-time management?

Heartbeat

Standard polling

Push Notification

Long polling

 Loading...

19. Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?

Signatures

Advanced Machine Learning

Reputation

Artificial Intelligence

 Loading...

20. What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

The endpoint is missing timely policy update

The endpoint is absent of the management console

The endpoint fails to receive content update

The endpoint is more exposed to threats

 Loading...

Page 3 of 3

21. Which two (2) Discovery and Deploy features could an administrator use to enroll MAC endpoints? (Select two)

Push Enroll

A custom Installation package creator pact

A default Direct Installation package

Invite User

A custom Direct installation package

 Loading...

 Loading...