Validate your Skills with Updated 250-561 Exam Questions & Answers and Test Engine
Tested & Approved 250-561 Study Materials Download Free Updated 72 Questions
Symantec 250-561 (Endpoint Security Complete - Administration R1) Certification Exam is a valuable credential for IT professionals involved in endpoint security administration. 250-561 exam evaluates the knowledge and skills of candidates regarding endpoint protection, incident response, policy management, and compliance. Endpoint Security Complete - Administration R1 certification is valid for three years, and it is suitable for security administrators, IT security officers, network administrators, and system administrators.
The Endpoint Security Complete - Administration R1 certification exam provides candidates with the knowledge and skills required to install, administer and manage Symantec Endpoint Security products efficiently. Candidates will learn how to manage the following Endpoint Security products: Symantec Endpoint Protection Cloud (SEP Cloud), Symantec Endpoint Protection Small Business Edition (SEP SBE), Symantec Endpoint Protection (SEP), and Symantec Endpoint Protection Advanced (SEP Advanced). Candidates will also gain knowledge in setting up security policies, server management, and troubleshooting.
NEW QUESTION # 34
Which SES security control protects against threats that may occur in the Impact phase?
- A. Antimalware
- B. IPS
- C. Firewall
- D. Device Control
Answer: C
NEW QUESTION # 35
Which Endpoint > Setting should an administrator utilize to locate unmanaged endpoints on a network subnet?
- A. Device Discovery
- B. Discover Endpoints
- C. Discover and Deploy
- D. Endpoint Enrollment
Answer: B
NEW QUESTION # 36
Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?
- A. Emulator
- B. SONAR
- C. Reputation
- D. Sandbox
Answer: D
NEW QUESTION # 37
What must an administrator check prior to enrolling an on-prem SEPM infrastructure into the cloud?
- A. Clients are running SEP 14.1.0 or later
- B. Clients are running SEP 14.2 or later
- C. Clients are running SEP 12-6 or later
- D. Clients are running SEP 14.0.1 or late
Answer: D
NEW QUESTION # 38
Files are blocked by hash in the blacklist policy.
Which algorithm is supported, in addition to MD5?
- A. SHA2
- B. MD5 "Salted"
- C. SHA256
- D. SHA256 "salted"
Answer: C
NEW QUESTION # 39
After editing and saving a policy, an administrator is prompted with the option to apply the edited policy to any assigned device groups.
What happens to the new version of the policy if the administrator declines the option to apply it?
- A. The new version of the policy is deleted
- B. The new version of the policy is added to the "in progress" list
- C. The policy display is returned to edit mode
- D. An unassigned version of the policy is created
Answer: C
NEW QUESTION # 40
Which SES feature helps administrator apply policies based on specific endpoint profiles?
- A. Policy Bundles
- B. Device Profiles
- C. Policy Groups
- D. Device Groups
Answer: C
NEW QUESTION # 41
What option must an administrator choose when rolling back a policy assignment to a previous version?
- A. Reverse
- B. Override
- C. Go Back
- D. Customize
Answer: B
NEW QUESTION # 42
Which rule types should be at the bottom of the list when an administrator adds device control rules?
- A. General "catch all" rules
- B. General "brand defined" rules
- C. Specific "device model" rules
- D. Specific "device type" rules
Answer: C
NEW QUESTION # 43
What is the frequency of feature updates with SES and the Integrated Cyber Defense Manager (ICDm)
- A. Quarterly
- B. Monthly
- C. Bi-monthly
- D. Weekly
Answer: D
NEW QUESTION # 44
Which security threat uses malicious code to destroy evidence, break systems, or encrypt data?
- A. Persistence
- B. Execution
- C. Discovery
- D. Impact
Answer: B
NEW QUESTION # 45
Which option should an administrator utilize to temporarily or permanently block a file?
- A. Hide
- B. Blacklist
- C. Encrypt
- D. Delete
Answer: B
NEW QUESTION # 46
In the ICDm, administrators are assisted by the My Task view. Which automation type creates the tasks within the console?
- A. Machine Learning
- B. Advanced Machine Learning
- C. Administrator defined rules
- D. Artificial Intelligence
Answer: D
NEW QUESTION # 47
Which IPS Signature type is Primarily used to identify specific unwanted traffic?
- A. Probe
- B. Malcode
- C. Attack
- D. Audit
Answer: C
NEW QUESTION # 48
Which default role has the most limited permission in the Integrated Cyber Defense Manager?
- A. Limited Administrator
- B. Server Administrator
- C. Restricted Administrator
- D. Endpoint Console Domain Administrator
Answer: B
NEW QUESTION # 49
Which URL is responsible for notifying the SES agent that a policy change occurred in the cloud console?
- A. ent-shasta.rrs-symantec.com
- B. stnd-ipsg.crsi-symantec.com
- C. spoc.norton.com
- D. ocsp.digicert.com
Answer: D
NEW QUESTION # 50
What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?
- A. A domain can contain multiple tenants
- B. Each customer can have one tenant and many domains
- C. Each customer can have one domain and many tenant
- D. A tenant can contain multiple domains
Answer: D
NEW QUESTION # 51
What happens when an administrator blacklists a file?
- A. The file is assigned to a chosen Blacklist policy
- B. The file is assigned to the default Blacklist policy
- C. The file is automatically quarantined
- D. The file is assigned to the Blacklist task list
Answer: D
NEW QUESTION # 52
What does an end-user receive when an administrator utilizes the Invite User feature to distribute the SES client?
- A. An email with a link to directly download the SES client
- B. An email with link to register on the ICDm user portal
- C. An email with the SES_setup.zip file attached
- D. An email with a link to a KB article explaining how to install the SES Agent
Answer: B
NEW QUESTION # 53
An administrator suspects that several computers have become part of a botnet. What should the administrator do to detect botnet activity on the network?
- A. Enable the Command and Control Server Firewall
- B. Set the Antimalware policy's Monitoring Level to 4
- C. Add botnet related signatures to the IPS policy's Audit Signatures list
- D. Enable the IPS policy's Show notification on the device setting
Answer: A
NEW QUESTION # 54
Which security control is complementary to IPS, providing a second layer of protection against network attacks?
- A. Network Protection
- B. Host Integrity
- C. Firewall
- D. Antimalware
Answer: A
NEW QUESTION # 55
Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?
- A. The System Policy
- B. The LiveUpdate Policy
- C. The System Schedule Policy
- D. The Firewall Policy
Answer: B
NEW QUESTION # 56
An endpoint fails to retrieve content updates.
Which URL should an administrator test in a browser to determine if the issue is network related?
- A. https://update.symantec.com/livetri.zip
- B. http://update.symantec.com/livetri.zip
- C. https://liveupdate.symantec,com/livetri.zi
- D. https://spocsymantec.com/livetri.zip
Answer: D
NEW QUESTION # 57
......
Symantec 250-561 certification exam is a valuable credential for professionals who want to demonstrate their expertise in administering the Symantec Endpoint Security Complete solution. It helps the candidates to enhance their skills and knowledge in the field of cybersecurity and advance their career opportunities. With proper preparation and practical experience, candidates can pass the exam and earn the certification, which is recognized globally.
Regular Free Updates 250-561 Dumps Real Exam Questions Test Engine: https://www.exam4tests.com/250-561-valid-braindumps.html
Practice Test Questions Verified Answers As Experienced in the Actual Test!: https://drive.google.com/open?id=1-JWeg5COzFKf0O86l_OKWfgvZFn3STBt