Symantec Symantec Certifications 250-561 Questions & Answers

• Question 51:

  A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.

  Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?

  A. SONAR

  B. Sapient

  C. IPS

  D. Emulator

  Correct Answer: B

• Question 52:

  Which alert rule category includes events that are generated about the cloud console?

  A. Security

  B. Diagnostic

  C. System

  D. Application Activity

  Correct Answer: A

• Question 53:

  In the ICDm, administrators are assisted by the My Task view. Which automation type creates the tasks within the console?

  A. Artificial Intelligence

  B. Machine Learning

  C. Advanced Machine Learning

  D. Administrator defined rules

  Correct Answer: A

• Question 54:

  What is the frequency of feature updates with SES and the Integrated Cyber Defense Manager (ICDm)

  A. Monthly

  B. Weekly

  C. Quarterly

  D. Bi-monthly

  Correct Answer: B

• Question 55:

  An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity. What should an administrator do to display only high risk files?

  A. Apply a list control

  B. Apply a search rule

  C. Apply a list filter

  D. Apply a search modifier

  Correct Answer: B

• Question 56:

  What characterizes an emerging threat in comparison to traditional threat?

  A. Emerging threats use new techniques and 0-day vulnerability to propagate.

  B. Emerging threats requires artificial intelligence to be detected.

  C. Emerging threats are undetectable by signature based engines.

  D. Emerging threats are more sophisticated than traditional threats.

  Correct Answer: A

• Question 57:

  Which technique randomizes the e memory address map with Memory Exploit Mitigation?

  A. SEHOP

  B. ROPHEAP

  C. ASLR

  D. ForceDEP

  Correct Answer: C

• Question 58:

  What should an administrator know regarding the differences between a Domain and a Tenant in ICDm?

  A. A tenant can contain multiple domains

  B. A domain can contain multiple tenants

  C. Each customer can have one domain and many tenant

  D. Each customer can have one tenant and many domains

  Correct Answer: A

• Question 59:

  Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

  A. Sandbox

  B. SONAR

  C. Reputation

  D. Emulator

  Correct Answer: A

• Question 60:

  An administrator must create a custom role in ICDm.

  Which area of the management console is able to have access restricted or granted?

  A. Policy Management

  B. Hybrid device management

  C. Agent deployment

  D. Custom Dashboard Creation

  Correct Answer: C