Symantec 250-580 Exam Practice Questions (P. 1)
- Full Access (150 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #1
What permissions does the Security Analyst Role have?
- ATrigger dumps, get & quarantine files, enroll new sites
- BSearch endpoints, trigger dumps, get & quarantine files
- CTrigger dumps, get & quarantine files, create device groups
- DSearch endpoints, trigger dumps, create policies
send
light_mode
delete
Question #2
What version number is assigned to a duplicated policy?
- AThe original policy's version number
- BZero
- CThe original policy's number plus one
- DOne
send
light_mode
delete
Question #3
Why is it important for an Incident Responder to review Related Incidents and Events when analyzing an incident for an After Actions Report?
- AIt ensures that the Incident is resolved, and the threat does not continue to spread to other parts of the environment.
- BIt ensures that the Incident is resolved, and future threats are automatically remediated.
- CIt ensures that the Incident is resolved, and the responder is able to close the incident in the SEDR manager.
- DIt ensures that the Incident is resolved, and the responder can determine the best remediation method.
send
light_mode
delete
Question #4
How does IPS check custom signatures?
- AIPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine continues checking for other signatures.
- BIPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine restarts checking for signatures.
- CIPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine stops checking other signatures.
- DIPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine logs the other signatures.
send
light_mode
delete
Question #5
What information is required to calculate retention rate?
- ANumber of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size
- BNumber of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size
- CNumber of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size
- DNumber of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size
send
light_mode
delete
All Pages