250-561 Online Practice Questions and Answers

How long does a blacklist task remain in the My Tasks view after its automatic creation?

A. 180 Days

B. 30 Days

C. 60 Days

D. 90 Days

Which default role has the most limited permission in the Integrated Cyber Defense Manager?

A. Restricted Administrator

B. Limited Administrator

C. Server Administrator

D. Endpoint Console Domain Administrator

An administrator must create a custom role in ICDm.

Which area of the management console is able to have access restricted or granted?

A. Policy Management

B. Hybrid device management

C. Agent deployment

D. Custom Dashboard Creation

Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?

A. Disable OS fingerprint profiling

B. Disable OS fingerprint detection

C. Enable OS fingerprint masqueradi

D. Enable OS fingerprint protection

Which Security Control dashboard widget should an administrator utilize to access detailed areas for a given security control ?

A. Learn More

B. Quick Links

C. More Info

D. Latest Tasks

Which two (2) options is an administrator able to use to prevent a file from being fasely detected? (Select two)

A. Assign the file a SHA-256 cryptographic hash

B. Add the file to a Whitelist policy

C. Reduce the Intensive Protection setting of the Antimalware policy

D. Register the file with Symantec's False Positive database

E. Rename the file

Which SES feature helps administrator apply policies based on specific endpoint profiles?

A. Device Groups

B. Device Profiles

C. Policy Bundles

D. Policy Groups

Which framework, open and available to any administrator, is utilized to categorize adversarial tactics and for each phase of a cyber attack?

A. MITRE RESPONSE

B. MITRE ATTandCK

C. MITRE ADVandNCE

D. MITRE ATTACK MATRIX

Which two (2) scan range options are available to an administrator for locating unmanaged endpoints? (Select two)

A. IP range within network

B. IP range within subnet

C. Entire Network

D. Entire Subnet

E. Subnet Range

An endpoint fails to retrieve content updates.

Which URL should an administrator test in a browser to determine if the issue is network related?

A. https://liveupdate.symantec,com/livetri.zi

B. http://update.symantec.com/livetri.zip

C. https://spocsymantec.com/livetri.zip

D. https://update.symantec.com/livetri.zip