Symantec 250-605 Actual Tests : Symantec Endpoint Protection 14.x Admin R2 Technical Specialist

Symantec 250-605 Exam Syllabus Topics:

Symantec Endpoint Protection 14.x Admin R2 Technical Specialist Sample Questions:

1. Which two methods can administrators use to reduce bandwidth consumption during content distribution in large environments?
(Choose two)

A) Use Group Update Providers (GUPs)
B) Increase the number of stored content revisions
C) Configure clients to pull updates directly from the internet
D) Deploy delta content updates

2. What are two common use cases for exporting SEDR events to an external log management system?
(Choose two)

A) Building compliance audit trails
B) Automatically renewing SEP licenses
C) Enabling offline SEPM installations
D) Correlating endpoint threats with other network events

3. What are two key indicators used by SEDR to identify potential malicious behavior?
(Choose two)

A) Fileless attack attempts involving PowerShell
B) DNS sinkhole redirection from SEP firewall
C) Lateral movement behaviors or credential dumping patterns
D) SEP client's auto-update status

4. What are two core benefits of SEP's layered security architecture?
(Choose two)

A) Combines behavior-based and signature-based detection
B) Reduces the need for definition updates
C) Enables SEP to function without a policy framework
D) Improves zero-day threat detection using multiple detection methods

5. When exporting SEDR incident reports for audit purposes, which format is typically supported?

A) PDF
B) DOCX
C) XML only
D) PPT

Solutions: