Free Broadcom 250-580 Exam Questions

Question 1

A company uses a remote administration tool that is detected as Hacktool.KeyLoggPro and quarantined by Symantec Endpoint Protection (SEP). Which step can an administrator perform to continue using the remote administration tool without detection by SEP?

A : Create a Tamper Protect exception for the tool

B : Create an Application to Monitor exception for the tool

C : Create a Known Risk exception for the tool

D : Create a SONAR exception for the tool

Answer: C

Question 2

An administrator changes the Virus and Spyware Protection policy for a specific group that disables AutoProtect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-Protect is still enabled on the client system. Which action should the administrator take to ensure that the desired setting is in place for the client?

A : Restart the client system

B : Run a command on the computer to Update Content

C : Enable the padlock next to the setting in the policy

D : Withdraw the Virus and Spyware Protection policy

Answer: C

Question 3

What does the MITRE ATT&CK Matrix consist of?

A : Problems and Solutions

B : Attackers and Techniques

C : Tactics and Techniques

D : Entities and Tactics

Answer: C

Question 4

An administrator changes the Virus and Spyware Protection policy for a specific group that disables AutoProtect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-Protect is still enabled on the client system. Which action should the administrator take to ensure that the desired setting is in place for the client?

A : Restart the client system

B : Run a command on the computer to Update Content

C : Enable the padlock next to the setting in the policy

D : Withdraw the Virus and Spyware Protection policy

Answer: C

Question 5

What information is required to calculate retention rate?

A : Number of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size

B : Number of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size

C : Number of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size

D : Number of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size

Answer: D