2023 Updated Symantec 250-561 Dumps PDF - Want To Pass 250-561 Fast
250-561 Practice Exam Dumps - 99% Marks In Symantec Exam
NEW QUESTION # 40
Why would an administrator choose the Server-optimized installation option when creating an installation package?
- A. To add the Server-optimized Firewall policy
- B. To reduce the SES client's using resources that are required for other server-specific processes.
- C. To limit the Intrusion Prevention policy to use server-only signatures.
- D. To add the SES client's Optimize Memory setting to the default server installation.
Answer: C
NEW QUESTION # 41
Which type of organization is likely to be targeted with emerging threats?
- A. Large organizations with dedicated security teams
- B. Small organization with little qualified staff
- C. Large organization with high turnover
- D. Small organization with externalized managed security
Answer: B
NEW QUESTION # 42
What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?
- A. The endpoint is missing timely policy update
- B. The endpoint fails to receive content update
- C. The endpoint is absent of the management console
- D. The endpoint is more exposed to threats
Answer: B
NEW QUESTION # 43
Which SES security control protects against threats that may occur in the Impact phase?
- A. Device Control
- B. IPS
- C. Firewall
- D. Antimalware
Answer: C
NEW QUESTION # 44
What does an end-user receive when an administrator utilizes the Invite User feature to distribute the SES client?
- A. An email with a link to a KB article explaining how to install the SES Agent
- B. An email with link to register on the ICDm user portal
- C. An email with the SES_setup.zip file attached
- D. An email with a link to directly download the SES client
Answer: B
NEW QUESTION # 45
A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.
Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?
- A. Sapient
- B. IPS
- C. SONAR
- D. Emulator
Answer: A
NEW QUESTION # 46
An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity. What should an administrator do to display only high risk files?
- A. Apply a list control
- B. Apply a search modifier
- C. Apply a list filter
- D. Apply a search rule
Answer: D
NEW QUESTION # 47
Which device page should an administrator view to track the progress of an issued device command?
- A. Activity Update
- B. Command Status
- C. Command History
- D. Recent Activity
Answer: D
NEW QUESTION # 48
The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?
- A. Firewall
- B. IPS
- C. Antimalware
- D. Reputation
Answer: C
NEW QUESTION # 49
How long does a blacklist task remain in the My Tasks view after its automatic creation?
- A. 60 Days
- B. 90 Days
- C. 30 Days
- D. 180 Days
Answer: C
NEW QUESTION # 50
Which security threat uses malicious code to destroy evidence, break systems, or encrypt data?
- A. Persistence
- B. Execution
- C. Impact
- D. Discovery
Answer: B
NEW QUESTION # 51
Which option should an administrator utilize to temporarily or permanently block a file?
- A. Delete
- B. Encrypt
- C. Blacklist
- D. Hide
Answer: C
NEW QUESTION # 52
Which Security Control dashboard widget should an administrator utilize to access detailed areas for a given security control ?
- A. Quick Links
- B. Latest Tasks
- C. More Info
- D. Learn More
Answer: B
NEW QUESTION # 53
What version number is assigned to a duplicated policy?
- A. The original policy's number plus one
- B. The original policy's version numb
- C. One
- D. Zero
Answer: A
NEW QUESTION # 54
An administrator learns of a potentially malicious file and wants to proactively prevent the file from ever being executed.
What should the administrator do?
- A. Add the file SHA1 to a blacklist policy
- B. Adjust the Antimalware policy age and prevalence settings
- C. Add the filename and SHA-256 hash to a Blacklist policy
- D. Increase the Antimalware policy Intensity to Level 5
Answer: B
NEW QUESTION # 55
Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?
- A. Advanced Machine Learning
- B. Reputation
- C. Signatures
- D. Artificial Intelligence
Answer: A
NEW QUESTION # 56
After editing and saving a policy, an administrator is prompted with the option to apply the edited policy to any assigned device groups.
What happens to the new version of the policy if the administrator declines the option to apply it?
- A. The new version of the policy is deleted
- B. An unassigned version of the policy is created
- C. The policy display is returned to edit mode
- D. The new version of the policy is added to the "in progress" list
Answer: C
NEW QUESTION # 57
Which URL is responsible for notifying the SES agent that a policy change occurred in the cloud console?
- A. stnd-ipsg.crsi-symantec.com
- B. ocsp.digicert.com
- C. spoc.norton.com
- D. ent-shasta.rrs-symantec.com
Answer: B
NEW QUESTION # 58
Which Endpoint > Setting should an administrator utilize to locate unmanaged endpoints on a network subnet?
- A. Discover Endpoints
- B. Discover and Deploy
- C. Endpoint Enrollment
- D. Device Discovery
Answer: A
NEW QUESTION # 59
What is the frequency of feature updates with SES and the Integrated Cyber Defense Manager (ICDm)
- A. Monthly
- B. Quarterly
- C. Weekly
- D. Bi-monthly
Answer: C
NEW QUESTION # 60
An administrator is evaluating an organization's computers for an upcoming SES deployment. Which computer meets the pre-requisites for the SES client?
- A. A computer running Mac OS X 10.8 with 500 MB of disk space, 4 GB of RAM, and an Intel Core 2 Duo 64-bit processor
- B. A computer running Windows 10 with 400 MB of disk space, 2 GB of RAM, and a 2.4 GHz Intel Pentium 4 processor
- C. A computer running Mac OS X 10.14 with 400 MB of disk space, 4 GB of RAM, and an Intel Core 2 Duo 64-bit processor
- D. A computer running Windows 8 with 380 MB of disk space, 2 GB of RAM, and a 2.8 GHz Intel Pentium 4 processor
Answer: B
NEW QUESTION # 61
Which two (2) options is an administrator able to use to prevent a file from being fasely detected (Select two)
- A. Register the file with Symantec's False Positive database
- B. Reduce the Intensive Protection setting of the Antimalware policy
- C. Rename the file
- D. Assign the file a SHA-256 cryptographic hash
- E. Add the file to a Whitelist policy
Answer: A,E
NEW QUESTION # 62
......
Updated Verified 250-561 Q&As - Pass Guarantee: https://www.realvce.com/250-561_free-dumps.html
250-561 Certification with Actual Questions: https://drive.google.com/open?id=1Jx1-h3zr-FeJsKXLm5t7--2iM7FjYXMq