Confidently Practice Online with Free 250-580 Exam Cram

Practice your Endpoint Security Complete - R2 Technical Specialist certification test with free 250-580 exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real 250-580 exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Broadcom 250-580 exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which type of file attribute is valid for creating a block list entry with Symantec Endpoint Detection and Response (SEDR)?

Options :

A : SHA256

B : Type

C : Date Created

D : Filename

Answer: A

Question 2

Which EDR feature is used to search for real-time indicators of compromise?

Options :

A : Domain search

B : Endpoint search

C : Cloud Database search

D : Device Group search

Answer: B

Question 3

What information is required to calculate retention rate?

Options :

A :

Number of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size

B : Number of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size

C :

Number of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size

D :

Number of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size

Answer: D

Question 4

What are the two (2) locations where an Incident Responder should gather data for an After Actions Report in SEDR? (Select two)

Options :

A : Incident Manager

B : Policies

C : Syslog

D : Action Manager

E : Endpoint Search

Answer: A,C

Question 5

An administrator changes the Virus and Spyware Protection policy for a specific group that disables AutoProtect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-Protect is still enabled on the client system. Which action should the administrator take to ensure that the desired setting is in place for the client?

Options :

A : Restart the client system

B : Run a command on the computer to Update Content

C : Enable the padlock next to the setting in the policy

D : Withdraw the Virus and Spyware Protection policy

Answer: C