Symantec 250-561 問題集

質問 1：
What are the Exploit Mitigation security control's mitigation techniques designed to prevent?
A. Misbehaving applications
B. Packed file execution
C. Rootkit downloads
D. File-less attacks
正解：C

質問 2：
Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?
A. Artificial Intelligence
B. Signatures
C. Reputation
D. Advanced Machine Learning
正解：D

質問 3：
Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?
A. Emulator
B. Sandbox
C. SONAR
D. Reputation
正解：B

質問 4：
Which two (2) options is an administrator able to use to prevent a file from being fasely detected (Select two)
A. Register the file with Symantec's False Positive database
B. Reduce the Intensive Protection setting of the Antimalware policy
C. Add the file to a Whitelist policy
D. Assign the file a SHA-256 cryptographic hash
E. Rename the file
正解：A,C

質問 5：
In the ICDm, administrators are assisted by the My Task view. Which automation type creates the tasks within the console?
A. Administrator defined rules
B. Artificial Intelligence
C. Machine Learning
D. Advanced Machine Learning
正解：B

質問 6：
The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?
A. Antimalware
B. IPS
C. Firewall
D. Reputation
正解：A

質問 7：
Which option should an administrator utilize to temporarily or permanently block a file?
A. Blacklist
B. Hide
C. Encrypt
D. Delete
正解：A