250-580

250-580 practice questions, page 4 of 6, with answer review and explanations.

Question 16

What is an appropriate use of a file fingerprint list?

  1. Allow unknown files to be downloaded with Insight
  2. Prevent programs from running
  3. Prevent AntiVirus from scanning a file
  4. Allow files to bypass Intrusion Prevention detection

Question 17

What Threat Defense for Active Directory feature disables a process's ability to spawn another process, overwrite a part of memory, run recon commands, or communicate to the network?

  1. Process Mitigation
  2. Process Protection
  3. Memory Analysis
  4. Threat Monitoring

Question 18

An administrator decides to migrate an SES Complete hybrid environment to a fully cloud-managed one. After cleaning up on-premise group structure and policies. What is the next recommended step for migration?

  1. Export unique policies from SEPM
  2. Enroll the SEPM in ICDm
  3. Migrate the agents from ICDm
  4. Import unique policies in ICDm

Question 19

When are events generated within SEDR

  1. When an incident is selected
  2. When an activity occurrs
  3. When any event is opened
  4. When entities are viewed

Question 20

What does the Endpoint Communication Channel (ECC) 2.0 allow Symantec EDR to directly connect to?

  1. SEDR Cloud Console
  2. Synapse
  3. SEP Endpoints
  4. SEPM