When configuring Network Integrity, why is it a requirement to add trusted certificates?

To allow enterprise SSL decryption for security scanning

To secure the connection to ICDm

To allow a trusted VPN connection

To bypass an attacker's MITM proxy

What does an Endpoint Activity Recorder (EAR) full dump consist of?

All of the recorded events that occurred on an endpoint

All of the recorded events that occurred on an endpoint relating to a single file

All of the recorded events that occurred on an endpoint relating to a single process

All of the recorded events that occurred on an endpoint

All of the recorded events that are in the SEDR database

How are Insight results stored?

Encrypted on the Symantec Endpoint Protection Manager

Unencrypted on the Symantec Endpoint Protection Manager

Encrypted on the Symantec Endpoint Protection client

Unencrypted on the Symantec Endpoint Protection client

Which action must a Symantec Endpoint Protection administrator take before creating custom Intrusion Prevention signatures?

Change the custom signature order

Create a Custom Intrusion Prevention Signature library

Which Firewall rule components should an administrator configure to block facebook.com use during business hours?

Host(s), Network Interface, and Network Service

Application, Host(s), and Network Service

Action, Application, and Schedule

Performance on a SEPM is less than expected and generates intermittent errors. How could the system administrators be notified of performance issues?

Add a Server health alert and specify how often the notifications need to be raised. Specify the e-mail address that needs to be notified and the action when the server health becomes poor.

Add a System event alert and specify how often the notifications need to be raised. Specify the e-mail address that needs to be notified and the action when the server health becomes poor.

Add an Authentication alert and specify how often the notifications need to be raised. Specify the e-mail address that needs to be notified and the action when the server health becomes poor.

Add a Client security alert and specify how often the notifications need to be raised. Specify the e-mail address that needs to be notified and the action when the server health becomes poor.

Add a Server health alert and specify how often the notifications need to be raised. Specify the e-mail address that needs to be notified and the action when the server health becomes poor.

Administrators at a company share a single terminal for configuring Symantec Endpoint Protection. The administrators want to ensure that each administrator using the console is forced to authenticate using their individual credentials. They are concerned that administrators may forget to log off the terminal, which would easily allow others to gain access to the Symantec Endpoint Protection Manager (SEPM) console.Which setting should the administrator disable to minimize the risk of non-authorized users logging into the SEPM console?

Allow users to save credentials when logging on

Delete clients that have not connected for specified time

Lock account after the specified number of unsuccessful logon attempts

Allow administrators to reset passwords

What happens when a device fails a Host Integrity check?

An antimalware scan is initiated

An administrative notification is logged

A user is unknowingly about to connect to a malicious website and download a known threat within a .rar file. All Symantec Endpoint Protection technologies are installed on the client's system.In which feature set order must the threat pass through to successfully infect the system?

Firewall, IPS, Download Insight

Download Insight, Firewall, IPS

Firewall, IPS, Download Insight

IPS, Firewall, Download Insight

Download Insight, IPS, Firewall

What methods should an administrator utilize to restore communication on a client running SEP for Mac?

Use Client Deployment Wizard to push out a communications package.

Use the Sylink Drop Tool on the SEPM.

sudo launchct1 load /Library/LaunchDaemons/eom.Symantec.symdaemon.'plist

Use Third Party Deployment to push out a communications package.

An organization has a virtualized environment that is utilized by a group of Developers for testing. What feature can this organization utilize to optimize performance when running scheduled scans?

Use Shared Insight Cache in virtualized environments

Disable early anti-malware (ELAM) detection

Use Shared Insight Cache in virtualized environments

What is the difference between running Device Control for a Mac versus Windows?

Mac Device Control runs at the volume level. It enforces control only on storage devices.

Mac Device Control runs at the driver level. It enforces control only on Apple supported devices.

Mac Device Control runs at the volume level. It enforces control only on storage devices.

Mac Device Control runs at the kernel level. It enforces control only on built-in devices.

Mac Device Control runs at the user level. It enforces control only on iCIoud storage.

Which default role has the most limited permission in the Integrated Cyber Defense Manager?

Endpoint Console Domain Administrator

A Symantec Endpoint Protection (SEP) client uses a management server list with three management servers in the priority 1 list.Which mechanism does the SEP client use to select an alternate management server if the currently selected management server is unavailable?

The client chooses another server in the list randomly.

The client chooses a server based on the lowest server load.

The client chooses a server with the next highest IP address.

The client chooses the next server alphabetically by server name.

Why is it important for an Incident Responder to search for suspicious registry and system file changes when threat hunting?

Attackers can establish persistence within an infected host

Attackers can trick users into giving up their enterprise credentials

Attackers may shadow valid sessions and inject hidden actions

Attackers may cause unusual DNS requests

Broadcom 250-580 Practice Test 4 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Broadcom 250-580 Practice Test 4

Question

Broadcom 250-580 Practice Tests

Practice Tests