Free Endpoint Security Complete – Administration R1 Exam 250-561 Exam Practice Test

An administrator learns of a potentially malicious file and wants to proactively prevent the file from ever being executed. What should the administrator do?

• Add the file SHA1 to a blacklist policy
• Increase the Antimalware policy Intensity to Level 5
• Add the filename and SHA-256 hash to a Blacklist policy
• Adjust the Antimalware policy age and prevalence settings

The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?

• Antimalware
• Reputation
• Firewall
• IPS

An administrator suspects that several computers have become part of a botnet. What should the administrator do to detect botnet activity on the network?

• Enable the Command and Control Server Firewall
• Add botnet related signatures to the IPS policy's Audit Signatures list
• Enable the IPS policy's Show notification on the device setting
• Set the Antimalware policy's Monitoring Level to 4

Which security threat uses malicious code to destroy evidence, break systems, or encrypt data?

• Execution
• Persistence
• Impact
• Discovery

Which security control is complementary to IPS, providing a second layer of protection against network attacks?

• Host Integrity
• Antimalware
• Firewall
• Network Protection

How long does a blacklist task remain in the My Tasks view after its automatic creation?

• 180 Days
• 30 Days
• 60 Days
• 90 Days

An endpoint fails to retrieve content updates. Which URL should an administrator test in a browser to determine if the issue is network related?

• https://liveupdate.symantec,com/livetri.zi
• http://update.symantec.com/livetri.zip
• https://spocsymantec.com/livetri.zip
• https://update.symantec.com/livetri.zip

Which device page should an administrator view to track the progress of an issued device command?

• Command Status
• Command History
• Recent Activity
• Activity Update

An administrator needs to create a new Report Template that will be used to track firewall activity. Which two (2) report template settings are optional? (Select 2)

• Output format
• Generation schedule
• Email recipients
• Time frame
• Size restrictions

Which antimalware intensity level is defined by the following: "Blocks files that are most certainly bad or potentially bad files. Results in a comparable number of false positives and false negatives."

• Level 5
• Level 2
• Level 1
• Level 6