Broadcom Symantec Endpoint Security Complete Admin R1.4 Technical Specialist - 250-604 Exam Practice Test
Question 1
Scenario:
You are tasked with preparing a quarterly executive report for senior leadership that summarizes top threats, affected endpoints, and current mitigations.
Which ICDm feature should you use to accomplish this efficiently?
You are tasked with preparing a quarterly executive report for senior leadership that summarizes top threats, affected endpoints, and current mitigations.
Which ICDm feature should you use to accomplish this efficiently?
Correct Answer: D
Question 2
What benefit does behavioral tuning offer in the context of App Control and reducing the endpoint attack surface?
Correct Answer: B
Question 3
What primary advantage does EDR offer over standard antivirus capabilities in Symantec Endpoint Security Complete?
Correct Answer: D
Question 4
What ensures smooth operation during policy migration from SEPM to ICDm in a hybrid architecture?
Correct Answer: D
Question 5
Which two types of threats are addressed by SES Complete's Network Integrity feature for mobile devices? (Choose two)
Correct Answer: A,B
Question 6
Scenario:
Your organization is expanding to new geographies, and you are tasked with applying attack surface reduction through SES Complete's App Control. Several regional apps trigger frequent alerts due to behavior deemed uncommon.
Which two strategies should you implement to ensure operational continuity while maintaining security posture? (Choose two)
Your organization is expanding to new geographies, and you are tasked with applying attack surface reduction through SES Complete's App Control. Several regional apps trigger frequent alerts due to behavior deemed uncommon.
Which two strategies should you implement to ensure operational continuity while maintaining security posture? (Choose two)
Correct Answer: B,C
Question 7
Scenario:
You've just deployed TDAD across your organization's domain controllers. During the baseline phase, you observe frequent, yet legitimate administrative activity. You want to avoid false positives while still preparing for enforcement.
Which two actions should you take? (Choose two)
You've just deployed TDAD across your organization's domain controllers. During the baseline phase, you observe frequent, yet legitimate administrative activity. You want to avoid false positives while still preparing for enforcement.
Which two actions should you take? (Choose two)
Correct Answer: B,C
Question 8
Which MITRE ATT&CK framework step includes destroying data and rendering an endpoint inoperable?
Correct Answer: D
Question 9
What role does the MITRE ATT&CK framework play in SES Complete configuration?
Correct Answer: D
