Online 250-561 Test Brain Dump Question and Test Engine [Q38-Q58]

Q38. Which report template includes a summary of risk distribution by devices, users, and groups?

Q39. Which Security Control dashboard widget should an administrator utilize to access detailed areas for a given security control ?

Q40. Which SEPM-generated element is required for an administrator to complete the enrollment of SEPM to the cloud console?

Q41. An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity. What should an administrator do to display only high risk files?

Q42. Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?

Q43. Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

Q44. In the ICDm, administrators are assisted by the My Task view. Which automation type creates the tasks within the console?

Q45. Wh.ch Firewall rule components should an administrator configure to block facebook.com use during business hours?

Q46. In which phase of MITRE framework would attackers exploit faults in software to directly tamper with system memory?

Q47. Which designation should an administrator assign to the computer configured to find unmanaged devices?

Q48. Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?

Q49. A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.
Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?

Q50. Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)

Q51. An endpoint fails to retrieve content updates.
Which URL should an administrator test in a browser to determine if the issue is network related?

Q52. An administrator learns of a potentially malicious file and wants to proactively prevent the file from ever being executed.
What should the administrator do?

Q53. Which IPS Signature type is Primarily used to identify specific unwanted traffic?

Q54. Which two (2) scan range options are available to an administrator for locating unmanaged endpoints? (Select two)

Q55. Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?

Q56. Which option should an administrator utilize to temporarily or permanently block a file?

Q57. What must an administrator check prior to enrolling an on-prem SEPM infrastructure into the cloud?

Q58. Which technique randomizes the e memory address map with Memory Exploit Mitigation?