Free Endpoint Security Complete – Administration R1 Exam 250-561 Exam Practice Test

Which report template type should an administrator utilize to create a daily summary of network threats detected?

• Network Risk Report
• Blocked Threats Report
• Intrusion Prevention Report
• Access Violation Report

What happens when an administrator blacklists a file?

• The file is assigned to the Blacklist task list
• The file is automatically quarantined
• The file is assigned to a chosen Blacklist policy
• The file is assigned to the default Blacklist policy

Which communication method is utilized within SES to achieve real-time management?

• Heartbeat
• Standard polling
• Push Notification
• Long polling

An administrator needs to create a new Report Template that will be used to track firewall activity. Which two (2) report template settings are optional? (Select 2)

• Output format
• Generation schedule
• Email recipients
• Time frame
• Size restrictions

What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

• A tenant can contain multiple domains
• A domain can contain multiple tenants
• Each customer can have one domain and many tenant
• Each customer can have one tenant and many domains

Which rule types should be at the bottom of the list when an administrator adds device control rules?

• General "catch all" rules
• General "brand defined" rules
• Specific "device type" rules
• Specific "device model" rules

The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?

• Antimalware
• Reputation
• Firewall
• IPS

What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

• The endpoint is missing timely policy update
• The endpoint is absent of the management console
• The endpoint fails to receive content update
• The endpoint is more exposed to threats

Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?

• Disable OS fingerprint profiling
• Disable OS fingerprint detection
• Enable OS fingerprint masqueradi
• Enable OS fingerprint protection

In which phase of MITRE framework would attackers exploit faults in software to directly tamper with system memory?

• Exfiltration
• Discovery
• Execution
• Defense Evasion