Symantec SCS 250-561 Exam Training Material

dumps2023-01-12T02:47:39+08:00

dumps Symantec 250-561 exam, 250-561 exam training material, 250-561 sample questions, Symantec SCS 250-561 exam 0 Comments

Symantec SCS 250-561 exam training material is useful. The best way to pass the 250-561 exam is to study thoroughly and gain a strong understanding of the material covered on the exam. It’s also important to practice with 250-561 sample questions and study guides to get an idea of the types of questions that will be on the exam, and to become familiar with the format of the 250-561 exam. Free Symantec SCS 250-561 exam training material is below.

Page 1 of 3

1. How long does a blacklist task remain in the My Tasks view after its automatic creation?

180 Days

30 Days

60 Days

90 Days

2. Which default role has the most limited permission in the Integrated Cyber Defense Manager?

Restricted Administrator

Limited Administrator

Server Administrator

Endpoint Console Domain Administrator

3. Wh.ch Firewall rule components should an administrator configure to block facebook.com use during business hours?

Action, Hosts(s), and Schedule

Action, Application, and Schedule

Host(s), Network Interface, and Network Service

Application, Host(s), and Network Service

4. Which rule types should be at the bottom of the list when an administrator adds device control rules?

General "catch all" rules

General "brand defined" rules

Specific "device type" rules

Specific "device model" rules

5. Which URL is responsible for notifying the SES agent that a policy change occurred in the cloud console?

spoc.norton.com

stnd-ipsg.crsi-symantec.com

ent-shasta.rrs-symantec.com

ocsp.digicert.com

6. What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

The endpoint is missing timely policy update

The endpoint is absent of the management console

The endpoint fails to receive content update

The endpoint is more exposed to threats

7. Which SES security control protects against threats that may occur in the Impact phase?

Device Control

IPS

Antimalware

Firewall

8. An administrator learns of a potentially malicious file and wants to proactively prevent the file from ever being executed.

What should the administrator do?

Add the file SHA1 to a blacklist policy

Increase the Antimalware policy Intensity to Level 5

Add the filename and SHA-256 hash to a Blacklist policy

Adjust the Antimalware policy age and prevalence settings

9. Which SEPM-generated element is required for an administrator to complete the enrollment of SEPM to the cloud console?

Token

SEPM password

Certificate key pair

SQL password

10. An administrator must create a custom role in ICDm.

Which area of the management console is able to have access restricted or granted?

Policy Management

Hybrid device management

Agent deployment

Custom Dashboard Creation

Page 2 of 3

11. Which Endpoint > Setting should an administrator utilize to locate unmanaged endpoints on a network subnet?

Discover Endpoints

Endpoint Enrollment

Discover and Deploy

Device Discovery

12. What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

A tenant can contain multiple domains

A domain can contain multiple tenants

Each customer can have one domain and many tenant

Each customer can have one tenant and many domains

13. Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

Sandbox

SONAR

Reputation

Emulator

14. An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity.

What should an administrator do to display only high risk files?

Apply a list control

Apply a search rule

Apply a list filter

Apply a search modifier

15. What characterizes an emerging threat in comparison to traditional threat?

Emerging threats use new techniques and 0-day vulnerability to propagate.

Emerging threats requires artificial intelligence to be detected.

Emerging threats are undetectable by signature based engines.

Emerging threats are more sophisticated than traditional threats.

16. Which technique randomizes the e memory address map with Memory Exploit Mitigation?

SEHOP

ROPHEAP

ASLR

ForceDEP

17. In the ICDm, administrators are assisted by the My Task view.

Which automation type creates the tasks within the console?

Artificial Intelligence

Machine Learning

Advanced Machine Learning

Administrator defined rules

18. What is the frequency of feature updates with SES and the Integrated Cyber Defense Manager (ICDm)

Monthly

Weekly

Quarterly

Bi-monthly

19. A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.

Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?

SONAR

Sapient

IPS

Emulator

20. Which alert rule category includes events that are generated about the cloud console?

Security

Diagnostic

System

Application Activity

Page 3 of 3

21. Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?

Disable OS fingerprint profiling

Disable OS fingerprint detection

Enable OS fingerprint masqueradi

Enable OS fingerprint protection

Symantec SCS 250-561 Exam Training Material

Symantec SCS 250-561 Exam Training Material

Share this post

Leave a Reply Cancel reply

Related Posts

250-550 Administration of Symantec Endpoint Security – R1 Questions