Confidently Practice Online with Free 250-580 Exam Cram

Practice your Endpoint Security Complete - R2 Technical Specialist certification test with free 250-580 exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real 250-580 exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Broadcom 250-580 exam cram backed by our confidence-boosting refund guarantee.

Question 1

A company uses a remote administration tool that is detected as Hacktool.KeyLoggPro and quarantined by Symantec Endpoint Protection (SEP). Which step can an administrator perform to continue using the remote administration tool without detection by SEP?

Options :

A : Create a Tamper Protect exception for the tool

B : Create an Application to Monitor exception for the tool

C : Create a Known Risk exception for the tool

D : Create a SONAR exception for the tool

Answer: C

Question 2

What EDR function minimizes the risk of an endpoint infecting other resources in the environment?

Options :

A : Quarantine

B : Block

C : Deny List

D : Firewall

Answer: A

Question 3

Which type of file attribute is valid for creating a block list entry with Symantec Endpoint Detection and Response (SEDR)?

Options :

A : SHA256

B : Type

C : Date Created

D : Filename

Answer: A

Question 4

Which type of event does operation:1indicate in a SEDR database search?

Options :

A : File Deleted.

B : File Closed.

C : File Open.

D : File Created.

Answer: C

Question 5

Which SES feature helps administrators apply policies based on specific endpoint profiles?

Options :

A : Policy Bundles

B : Device Profiles

C : Policy Groups

D : Device Groups

Answer: D