Symantec Endpoint Protection 14.x Admin R2 Technical Specialist - 250-605 Exam Practice Test

A. For testing new signature formats in a lab environment

B. When administrators require the most up-to-date protection immediately

C. When the client cannot connect to SEPM due to a hardware failure

D. During a widespread malware outbreak when Certified definitions are not yet available

A. Based on firewall logging history

B. Using machine learning to profile new applications

C. By analyzing domain trust relationships

D. By referencing a list of known attack signatures

A. Scheduled Reports

B. Role-based access control

C. Report database indexing

D. Daily summary log rotation

A. It eliminates the need for SEDR dashboards

B. It extends the SEP license period

C. It automatically applies SEP policy updates

D. It provides centralized security event correlation and advanced analytics

A. Download Insight

B. Host Intrusion Prevention

C. Device Control

D. Mail Auto-Protect

A. Telemetry data and event metadata

B. Patch deployment schedules

C. Policy compliance violations

D. Endpoint scan logs

A. It lists all administrator-defined groups and OUs

B. It provides LiveUpdate schedules for client groups

C. It shows clients currently in passive mode

D. It tracks the success or failure of actions like scans and policy updates

A. By replicating the entire content database on each client

B. Through scheduled pushes to clients every 24 hours

C. By triggering a full manual scan before delivering updates

D. Using delta updates to transmit only changed portions of content

A. It requires administrators to whitelist every executable manually

B. It automatically blocks all unknown memory accesses on launch

C. It uses a predefined list of supported applications and injection monitoring

D. It uses scheduled scans to detect memory issues

A. To view event logs generated by the SEPM

B. To list only infected endpoints

C. To organize and correlate all detected evidence related to a threat

D. To delete false positives directly from the database

A. Detect phishing URLs and block them

B. Isolate infected clients from the network

C. Prevent unauthorized applications from executing

D. Enforce behavior-based malware detection

A. Approved Application Lists

B. Allow Lists

C. Host Group Lists

D. File Fingerprint Lists

A. Security Overrides

B. Exceptions

C. Scan Overrides

D. Allow Lists

A. Format the local disk of the endpoint

B. Roll back to a previous policy version

C. Reset the user's password

D. Initiate an administrator-defined scan

A. Exporting reports to regulatory bodies

B. Isolating infected endpoints from the network

C. Gathering DNS query data from clients

D. Identifying malicious executables