250-614無料問題集「Symantec Endpoint Security Complete Admin R4 Technical Specialist」

質問 1

What is the recommended first step for an administrator to perform when beginning a discover and deploy campaign?

（A）Configure the registry

（B）Install the first SES agent in the subnet

（C）Configure the SES policies and Groups

（D）Disable the Windows firewall

正解：B 解答を投票する

質問 2

An endpoint attempts to execute a script from an untrusted source. Which SES Complete capability is most relevant?

（A）Device Group Management

（B）ICDm Reporting

（C）Adaptive Protection

（D）File Reputation

正解：C 解答を投票する

質問 3

Which capability enables EDR to identify suspicious endpoint activity?

（A）Policy inheritance

（B）Content updates

（C）Behavior analytics

（D）Device grouping

正解：C 解答を投票する

質問 4

Which data elements are commonly reviewed during EDR investigations?
(Select all that apply)

（A）File activity

（B）Process execution history

（C）Policy assignment history

（D）Network connections

正解：A、B、D 解答を投票する

質問 5

Which activities might indicate malicious behavior detected by EDR?
(Select all that apply)

（A）Process injection

（B）Policy updates

（C）Suspicious network connections

（D）Unauthorized privilege escalation

正解：A、C、D 解答を投票する

質問 6

A previously unseen executable attempts to run on an endpoint. Which Adaptive Protection action is most appropriate?

（A）Restrict execution until reputation is established

（B）Uninstall the endpoint agent

（C）Disable endpoint networking

（D）Allow execution permanently

正解：A 解答を投票する

質問 7

Why is the MITRE ATT&CK framework relevant to SES Complete?

（A）It replaces antivirus signatures

（B）It controls endpoint enrollment

（C）It provides a model for mapping attacker techniques

（D）It defines cloud licensing tiers

正解：C 解答を投票する

250-614 無料問題集「Symantec Endpoint Security Complete Admin R4 Technical Specialist」

弊社を連絡する

関連リンク

トップ試験