ExamGecko
Login
Home / Broadcom / 250-580 / List of questions
Ask Question

Broadcom 250-580 Practice Test - Questions Answers, Page 10

List of questions

Question 91

Report Export Collapse

What are the two (2) locations where an Incident Responder should gather data for an After Actions Report in SEDR? (Select two)

Become a Premium Member for full access
  Unlock Premium Member

Question 92

Report Export Collapse

The Behavioral Heat Map indicates that a specific application and a specific behavior are never used together. What action can be safely set for the application behavior in a Behavioral Isolation policy?

Become a Premium Member for full access
  Unlock Premium Member

Question 93

Report Export Collapse

Which two (2) instances could cause Symantec Endpoint Protection to be unable to remediate a file? (Select two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 94

Report Export Collapse

What SEP feature is leveraged when configuring custom IPS?

Become a Premium Member for full access
  Unlock Premium Member

Question 95

Report Export Collapse

Which action can an administrator take to improve the Symantec Endpoint Protection Manager (SEPM) dashboard performance and report accuracy?

Become a Premium Member for full access
  Unlock Premium Member

Question 96

Report Export Collapse

An administrator is troubleshooting a Symantec Endpoint Protection (SEP) replication.

Which component log should the administrator check to determine whether the communication between the two sites is working correctly?

Become a Premium Member for full access
  Unlock Premium Member

Question 97

Report Export Collapse

In what order should an administrator configure the integration between SEDR and Symantec Endpoint Protection in order to maximize their benefits?

Become a Premium Member for full access
  Unlock Premium Member

Question 98

Report Export Collapse

From which source can an administrator retrieve the SESC Network Integrity agent for a Windows 10 S mode endpoint?

Become a Premium Member for full access
  Unlock Premium Member

Question 99

Report Export Collapse

How does an administrator view all devices impacted by a suspicious file?

Become a Premium Member for full access
  Unlock Premium Member

Question 100

Report Export Collapse

A company deploys Symantec Endpoint Protection (SEP) to 50 virtual machines running on a single ESXi host.

Which configuration change can the administrator make to minimize sudden IOPS impact on the ESXi server while each SEP endpoint communicates with the Symantec Endpoint Protection Manager?

Become a Premium Member for full access
  Unlock Premium Member
Total 150 questions
Go to page: of 15
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which option should an administrator utilize to temporarily or permanently block a file?
An organization would like to use a content distribution method that centrally controls content types and versions. Almost all of their endpoints are running Windows. What type of content distribution method should be used?
Which SEP feature is required for using the SEDR Isolate function?
SES includes an advanced policy versioning system. When an administrator edits and saves the properties of an existing policy, a new version of the policy is created. What is the status of all previous versions of the policy?
Which client log shows that a client is downloading content from its designated source?
Which alert rule category includes events that are generated about the cloud console?
An administrator needs to identify infected computers that require a restart to finish remediation of a threat. What steps in the SEPM should an administrator perform to identify and restart the systems?
An administrator needs to increase the access speed for client files that are stored on a file server. Which configuration should the administrator review to address the read speed from the server?
Which antimalware intensity level is defined by the following: 'Blocks files that are most certainly bad or potentially bad files results in a comparable number of false positives and false negatives.'
When configuring Network Integrity, why is it a requirement to add trusted certificates?