최신 250-605 무료덤프 - Symantec Endpoint Protection 14.x Admin R2 Technical Specialist
Which two settings must be configured to forward SEDR events to an external SIEM system?
(Choose two)
(Choose two)
정답: B,C
Which two actions can be performed from the SEPM Reports page?
(Choose two)
(Choose two)
정답: A,C
What is the primary function of the Endpoint Activity Recorder (EAR) within SEDR?
정답: C
How does SEDR facilitate threat eradication across the environment?
정답: C
What are two actions SEP can take when a memory exploit attempt is detected?
(Choose two)
(Choose two)
정답: B,D
What priority would an incident that may have an impact on business be considered?
정답: C
What is the primary function of System Lockdown in SEP?
정답: A
Which two options are available under the "Clients" tab for taking action against malware-infected endpoints?
(Choose two)
(Choose two)
정답: A,D
When analyzing security events, what is the primary role of the Logs page in SEPM?
정답: D
What is the benefit of integrating SEDR with a SIEM such as Splunk?
정답: A
During a successful integration between SEDR and SEPM, which two data streams are shared to enhance EDR functionality?
(Choose two)
(Choose two)
정답: A,C
What are two benefits of using SEP Device Control in a corporate security strategy?
(Choose two)
(Choose two)
정답: A,B
Which two criteria can be used to define a location in SEP?
(Choose two)
(Choose two)
정답: A,D
What is the correlation engine that allows for faster, confident responses to security incidents?
정답: C