250-605 by Symantec Actual Free Exam Q&As

Question 1

Which feature excludes files and folders from various scan types so that scans do not interfere with daily business operations?

A. Security Overrides B. Exceptions C. Allow Lists D. Scan Overrides

Discussion 0

Correct Answer: B Vote an answer

Question 2

What is one purpose of enabling the "Stealth Mode" feature within the SEP Firewall Policy?

A. To allow traffic from all remote desktop applications B. To broadcast client activity logs to SEPM C. To prevent the computer from responding to unsolicited network probes D. To reduce scan load on the client device

Discussion 0

Correct Answer: C Vote an answer

Question 3

How does SEP enforce device restrictions for different hardware categories on Windows clients?

A. By monitoring system event logs for unauthorized devices B. Via class-level or device ID-level rules defined in Device Control policy C. Through user-level policies defined at the SEPM server D. Using Active Directory group policies

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which LiveUpdate policy type provides options for configuring a LiveUpdate delivery schedule?

A. LiveUpdate Schedule B. Content Delivery C. LiveUpdate Settings D. LiveUpdate Content

Discussion 0

Correct Answer: C Vote an answer

Question 5

What is the primary business objective of integrating Symantec Endpoint Detection and Response (SEDR) into an enterprise security environment?

A. To centralize data backup and disaster recovery B. To detect, investigate, and respond to advanced persistent threats C. To automate system patching across remote clients D. To manage endpoint licenses across domains

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which SEP policy controls the Memory Exploit Mitigation settings?

A. Application and Device Control Policy B. Windows Settings > Exploit Mitigation C. Intrusion Prevention Policy D. Virus and Spyware Protection Policy

Discussion 0

Correct Answer: B Vote an answer

Question 7

Which two functions are supported in the SEDR Management Console?
(Choose two)

A. Policy deployment to SEP clients B. Schedule OS patch updates C. Review and triage of threat incidents D. Search endpoint activity recorder logs

Discussion 0

Correct Answer: C,D Vote an answer

Question 8

How are role-based access controls (RBAC) implemented in the SEDR Management Console?

A. Through Active Directory domain trust inheritance B. By associating users with built-in roles that determine access scope C. By assigning IP-based firewall rules to each admin D. By configuring LDAP password hash exclusions

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which SEP feature allows administrators to exclude specific files, folders, or applications from being scanned or blocked by protection technologies?

A. Application Control B. Host Integrity Policy C. LiveUpdate Content Exceptions D. Security Exceptions

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which option allows SEP administrators to configure exceptions for applications that require special network access rules?

A. Application Rule Conditions B. Host Integrity Checks C. Download Insight Overrides D. Location Awareness Settings

Discussion 0

Correct Answer: A Vote an answer

Question 11

How does SEDR help security teams distinguish between suspicious and confirmed malicious activity?

A. By counting the number of firewall blocks triggered per IP B. By comparing incident names to threat intelligence feeds C. By assigning each endpoint to a specific investigation team D. By mapping events to MITRE ATT&CK stages and correlating artifacts

Discussion 0

Correct Answer: D Vote an answer

Question 12

Which SEP component analyzes application behavior in real time to detect zero-day threats?

A. Auto-Protect B. Intrusion Prevention System C. SONAR (Symantec Online Network for Advanced Response) D. Insight Lookup

Discussion 0

Correct Answer: C Vote an answer

Symantec Endpoint Protection 14.x Admin R2 Technical Specialist - 250-605 Exam Practice Test