Free Administration of Symantec Endpoint Security – R1 Exam 250-550 Exam Practice Test

What are the Exploit Mitigation security control's mitigation techniques designed to prevent?

• Packed file execution
• Misbehaving applications
• File-less attacks
• Rootkit downloads

Which framework, open and available to any administrator, is utilized to categorize adversarial tactics and for each phase of a cyber attack?

• MITRE RESPONSE
• MITRE ATT&CK
• MITRE ADV&NCE
• MITRE ATTACK MATRIX

Which alert rule category includes events that are generated about the cloud console?

• Security
• Diagnostic
• System
• Application Activity

Which device page should an administrator view to track the progress of an issued device command?

• Command Status
• Command History
• Recent Activity
• Activity Update

Which communication method is utilized within SES to achieve real-time management?

• Heartbeat
• Standard polling
• Push Notification
• Long polling

Which Symantec component is required to enable two factor authentication with VIP on the Integrated Cyber Defense manager (ICDm)?

• A physical token or a software token
• A software token and a VIP server
• A software token and an active directory account
• A physical token or a secure USB key

Which statement best defines Machine Learning?

• A program that needs user input to perform a task.
• A program that teams from observing other programs.
• A program that learns from experience to optimize the output of a task.
• A program that require data to perform a task.

Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)

• Confirm that daily active and weekly full scans take place on all endpoints
• Verify that all endpoints receive scheduled Live-Update content
• Use Power Eraser to clean endpoint Windows registries
• Add endpoints to a high security group and assign a restrictive Antimalware policy to the group
• Quarantine affected endpoints

Files are blocked by hash in the blacklist policy. Which algorithm is supported, in addition to MD5?

• SHA256
• SHA256 "salted"
• MD5 "Salted"
• SHA2

Which security control is complementary to IPS, providing a second layer of protection against network attacks?

• Host Integrity
• Antimalware
• Firewall
• Network Protection