Sign in

Free 250-580 sample questions

Real questions from the Endpoint Security Complete - R2 Technical Specialist practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose 2

A global corporation is deploying SES Complete using a hybrid model. They have an existing on-premises SEPM managing 10,000 clients and need to enroll it with the ICDm cloud console. The security policy requires that all communication between the SEPM and the cloud must pass through a dedicated, explicit proxy server that requires authentication. Which two actions are required to ensure successful enrollment? (Select TWO).

Question 2Choose one

During a security audit, an administrator discovers that the content definitions for a group of isolated servers in a secure network segment are severely outdated. These servers have no internet access. The administrator has access to a Symantec Endpoint Protection Manager (SEPM) with up-to-date content. What is the most efficient method to update the clients in the secure segment?

Question 3Choose one

True or False: When an SES Complete policy's Host Integrity check fails for a client, the client is automatically moved to the Quarantine group, regardless of the firewall policy configuration.

Question 4Choose one

A hospital is using SES Complete to protect workstations that are frequently moved between wards. They are experiencing performance issues with a critical medical imaging application that writes large temporary files to `C:\Temp\ImagingData\`. A previous administrator created a folder exception for this path in the Antivirus and Spyware Protection policy. Despite this, SONAR continues to generate detections on the application's processes when they access this directory. Why are the SONAR detections still occurring?

Question 5Choose one

An administrator is reviewing the `sylink.log` file on a client that is failing to communicate with its SEPM. The log contains repeated entries of `HTTP 407 Proxy Authentication Required`. The client is configured with the correct proxy settings in its communication policy. What is the most likely cause of this error?

Question 6Choose one

A security analyst needs to create a custom EDR query to hunt for evidence of a specific MITRE ATT&CK technique: T1059.001, PowerShell. The goal is to find any PowerShell command that contains the string `IEX (New-Object Net.WebClient).DownloadString`. Which search query syntax should be used in the ICDm console's threat hunting interface?

Question 7Choose one

An administrator wants to prevent users from copying sensitive data to any USB storage devices, but must allow specific, company-issued encrypted USB drives to function normally. They also need to allow HID devices like keyboards and mice. What is the most precise way to configure this in the Device Control policy?

Question 8Choose one

What is the primary function of the `sesinstaller.log` file during the installation of the Symantec Agent on a Windows endpoint?

Question 9Choose 2

A financial services company has a strict security policy that requires all endpoint security events to be forwarded to their central SIEM platform for correlation and long-term retention. An administrator needs to configure SES Complete to send detailed event data to the SIEM. Which two methods are supported for this integration? (Select TWO).

Question 10Choose one

An organization's security policy states that all firewall rules should follow the principle of least privilege. An administrator needs to create a firewall rule to allow a specific application, `billing.exe`, to communicate with a database server at `10.10.5.25` on TCP port `1433`. Which is the MOST securely configured rule?

10 more free samples are waiting

Create a free account to unlock the whole 250-580 sample bank, or get full access to all 226 practice questions in the simulator.

Create account