Q35. Which antimalware intensity level is defined by the following: “Blocks files that are most certainly bad or potentially bad files. Results in a comparable number of false positives and false negatives.”

Q36. Which IPS Signature type is Primarily used to identify specific unwanted traffic?

Q37. Which term or expression is utilized when adversaries leverage existing tools in the environment?

Q38. An endpoint is offline, and the administrator issues a scan command. What happens to the endpoint when it restarts, if it lacks connectivity?

Q39. The ICDm has generated a blacklist task due to malicious traffic detection. Which SES component was utilized to make that detection?

Q40. Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

Q41. Which Security Control dashboard widget should an administrator utilize to access detailed areas for a given security control ?

Q42. Which designation should an administrator assign to the computer configured to find unmanaged devices?

Q43. Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?

Q44. Which communication method is utilized within SES to achieve real-time management?

Q45. What version number is assigned to a duplicated policy?

Q46. What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

Q47. An administrator is evaluating an organization’s computers for an upcoming SES deployment. Which computer meets the pre-requisites for the SES client?

Q48. Which URL is responsible for notifying the SES agent that a policy change occurred in the cloud console?

Q49. Why would an administrator choose the Server-optimized installation option when creating an installation package?

Q50. Which framework, open and available to any administrator, is utilized to categorize adversarial tactics and for each phase of a cyber attack?

Q51. Which SES security control protects against threats that may occur in the Impact phase?

Q52. Which two (2) skill areas are critical to the success of incident Response Teams (Select two)

Q53. Which technique randomizes the e memory address map with Memory Exploit Mitigation?

Q54. What characterizes an emerging threat in comparison to traditional threat?

Q55. Which SEPM-generated element is required for an administrator to complete the enrollment of SEPM to the cloud console?