Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Endpoint Security Complete - R2 Technical Specialist Practice Questions

Exams4sure Dumps

Exam style questions across every 250-580 domain

Last Update 1 day ago
Total Questions : 150

Start with our free 250-580 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Endpoint Security exam. Each 250-580 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Symantec weak domains, see where you're losing marks, and build a focused study plan in minutes.

250-580 PDF

250-580 PDF (Printable)
$54.25
$154.99

250-580 Testing Engine

250-580 PDF (Printable)
$59.5
$169.99

250-580 PDF + Testing Engine

250-580 PDF (Printable)
$74.55
$212.99
Question # 31

What does an end-user receive when an administrator utilizes the Invite User feature to distribute the SES client?

Options:

A.  

An email with the SES_setup.zip file attached

B.  

An email with a link to register on the ICDm user portal

C.  

An email with a link to directly download the SES client

D.  

An email with a link to a KB article explaining how to install the SES Agent

Discussion 0
Question # 32

What prevention technique does Threat Defense for Active Directory use to expose attackers?

Options:

A.  

Process Monitoring

B.  

Obfuscation

C.  

Honeypot Traps

D.  

Packet Tracing

Discussion 0
Question # 33

Which action must a Symantec Endpoint Protection administrator take before creating custom Intrusion Prevention signatures?

Options:

A.  

Change the custom signature order

B.  

Create a Custom Intrusion Prevention Signature library

C.  

Define signature variables

D.  

Enable signature logging

Discussion 0
Question # 34

What permissions does the Security Analyst Role have?

Options:

A.  

Trigger dumps, get & quarantine files, enroll new sites

B.  

Search endpoints, trigger dumps, get & quarantine files

C.  

Trigger dumps, get & quarantine files, create device groups

D.  

Search endpoints, trigger dumps, create policies

Discussion 0
Question # 35

How does Memory Exploit Mitigation protect applications?

Options:

A.  

Injects a DLL(IPSEng32.dllorIPSEng64.dll)into protected processes and when an exploit attempt is detected, terminates the protected process to prevent the malicious code from running.

B.  

Injects a DLL(UMEngx86.dll)into applications that run in user mode and if the application behaves maliciously, then SEP detects it.

C.  

Injects a DLL (sysfer.dll) into processes being launched on the machine and if the process isn't trusted, prevents the process from running.

D.  

Injects a DLL(IPSEng32.dll)into browser processes and protects the machine from drive-by downloads.

Discussion 0
Question # 36

Which protection technology can detect botnet command and control traffic generated on the Symantec Endpoint Protection client machine?

Options:

A.  

Insight

B.  

SONAR

C.  

Risk Tracer

D.  

Intrusion Prevention

Discussion 0
Question # 37

An organization would like to use a content distribution method that centrally controls content types and versions. Almost all of their endpoints are running Windows.

What type of content distribution method should be used?

Options:

A.  

Management Server

B.  

Group Update Provider

C.  

Internal LiveUpdate Server

D.  

External LiveUpdate Server

Discussion 0
Question # 38

Administrators at a company share a single terminal for configuring Symantec Endpoint Protection. The administrators want to ensure that each administrator using the console is forced to authenticate using their individual credentials. They are concerned that administrators may forget to log off the terminal, which would easily allow others to gain access to the Symantec Endpoint Protection Manager (SEPM) console.

Which setting should the administrator disable to minimize the risk of non-authorized users logging into the SEPM console?

Options:

A.  

Allow users to save credentials when logging on

B.  

Delete clients that have not connected for specified time

C.  

Lock account after the specified number of unsuccessful logon attempts

D.  

Allow administrators to reset passwords

Discussion 0
Question # 39

Which type of security threat continues to threaten endpoint security after a system reboot?

Options:

A.  

file-less

B.  

memory attack

C.  

script

D.  

Rootkit

Discussion 0
Question # 40

What happens when a device fails a Host Integrity check?

Options:

A.  

An antimalware scan is initiated

B.  

The device is restarted

C.  

The device is quarantined

D.  

An administrative notification is logged

Discussion 0

Free Exams Sample Questions