250-604問題集、Broadcom実際の試験問題

質問 1

What are two advantages of using ICDm's built-in reporting engine over third-party solutions? (Choose two)

A. Requires no internet access for execution

B. Built-in compliance-oriented report templates

C. Automatic correlation with SEPM policies

D. Tight integration with real-time alert mechanisms

正解: B,D

質問 2

What benefits does SES Complete offer through its cloud-native architecture? (Choose two)

A. Requires frequent manual updates

B. Policy updates limited to once per day

C. Reduced administrative overhead

D. Faster deployment without local infrastructure

正解: C,D

質問 3

Which two capabilities does EDR offer to help analysts identify malicious activity on endpoints? (Choose two)

A. Interactive investigation using LiveShell

B. Behavioral telemetry from the Endpoint Activity Recorder

C. Integration with Active Directory GPOs

D. Encrypted file transfer monitoring

正解: A,B

質問 4

How do policy adaptations in SES Complete contribute to strengthening the organization's security posture while minimizing operational disruption?

A. By allowing users to bypass policy changes for 48 hours

B. By triggering full endpoint scans after every minor update

C. By enforcing default policy resets weekly

D. By analyzing endpoint behavior and offering automated suggestions for rule modifications

正解: D

質問 5

How does SES Complete remediate threats that are detected through Network Integrity scanning on mobile devices?

A. By alerting users through SMS before blocking access

B. By isolating the device from the corporate network and resetting its network stack

C. By sending a daily digest of events to the Android system log

D. By triggering automated factory reset of the device

正解: B

質問 6

You are responsible for reducing the attack surface across all high-risk endpoints in your organization. After enabling App Control, you notice multiple behavioral drifts and flagged processes across sales department devices.
What actions should you take to address these alerts and maintain both operational continuity and security? (Choose three)

A. Immediately block all newly flagged processes regardless of business function

B. Analyze heatmap trends to determine if a broader policy change is needed

C. Adjust behavioral tuning to reduce false positives without compromising protection

D. Move all flagged endpoints to a quarantine VLAN until further notice

E. Use drift monitoring to evaluate whether the flagged behavior is legitimate or malicious

正解: B,C,E

質問 7

What is a key method used by TDAD to detect lateral movement in a Windows domain?

A. Evaluating abnormal authentication paths between user accounts and systems

B. Detecting DNS tunneling behavior

C. Analyzing Sysmon event logs

D. Monitoring NTFS permission changes

正解: A

質問 8

Scenario:
You are tasked with preparing a quarterly executive report for senior leadership that summarizes top threats, affected endpoints, and current mitigations.
Which ICDm feature should you use to accomplish this efficiently?

A. Policy Configuration Audit

B. Incident Summary Email Notifications

C. Administrative Reporting with scheduled reports

D. Alert Queue Export

正解: C

質問 9

What is the benefit of using layered security controls in SES Complete?

A. Faster reboot times

B. Improved detection and prevention across multiple attack vectors

C. Reduced data usage

D. Simplified licensing

正解: B

質問 10

Which administrative practices support successful hybrid management of endpoints between SEPM and ICDm? (Choose two)

A. Limiting endpoint communication to SEPM during business hours

B. Monitoring policy conflict resolution logs after major updates

C. Documenting endpoint group membership and related policies in both systems

D. Using custom registry entries to enforce policy inheritance

正解: B,C

質問 11

Why is it important to configure real-time threat identification in ICDm?

A. To accelerate OS patch deployment

B. To improve email deliverability

C. To reduce licensing costs

D. To enable proactive detection and response

正解: D

質問 12

What benefit does ICDm provide when managing remote endpoints?

A. Enables real-time policy enforcement and threat remediation

B. Blocks updates unless the device is on-premises

C. Limits endpoint visibility outside the LAN

D. Requires VPN to update policies

正解: A

Broadcom Symantec Endpoint Security Complete Admin R1.4 Technical Specialist - 250-604 模擬練習