What information is required to calculate storage requirements?
Answer(s): B
Calculating storage requirements for Symantec Endpoint Security (SES) involves gathering specific information related to data retention and event storage needs. The required information includes:Number of Endpoints: Determines the scale of data to be managed. EAR Data per Endpoint per Day: Refers to the Endpoint Activity Recorder (EAR) data generated by each endpoint daily, affecting storage usage.Number of Days to Retain: Indicates the data retention period, which impacts the total volume of stored data.Number of Endpoint Dumps and Dump Size: These parameters define the size and number of memory dumps, which are essential for forensic analysis and troubleshooting. This information allows accurate calculation of storage needs, ensuring adequate capacity for logs, dumps, and activity data.
The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM).How many content revisions must the SEPM keep to ensure clients that check in to the SEPM every 10 days receive xdelta content packages instead of full content packages?
Answer(s): C
To ensure that clients checking in every 10 days receive xdelta content packages instead of full content packages, 30 content revisions must be retained on the Symantec Endpoint Protection Manager (SEPM). Here's why:Incremental Updates: xdelta packages are incremental updates that only download changes since the last update, conserving bandwidth and speeding up client updates. Content Revision Retention: SEPM needs to retain a sufficient number of content revisions to allow clients that check in intermittently (such as every 10 days) to download incremental rather than full content packages.Default Retention Recommendation: Retaining 30 content revisions ensures that clients are covered for up to 10 days of updates, meeting the requirement for xdelta delivery.This setup optimizes resource usage by reducing the load on network and client systems.
Which two (2) criteria are used by Symantec Insight to evaluate binary executables? (Select two.)
Answer(s): B,E
Symantec Insight uses Prevalence and Age as two primary criteria to evaluate binary executables. These metrics help determine the likelihood that a file is either benign or malicious based on its behavior across a broad user base:Prevalence: This metric assesses how widely a file is used across Symantec's global community. Files with higher prevalence are generally more likely to be safe, while rare files may pose higher risks. Age: The age of a file is also considered. Older files with a stable reputation are less likely to be malicious, whereas newer, unverified files are scrutinized more closely. Using these criteria, Symantec Insight provides reliable reputation ratings for binary files, enhancing endpoint security by preemptively identifying potential threats.
What must be entered before downloading a file from ICDm?
Before downloading a file from the Integrated Cyber Defense Manager (ICDm), the hash of the file must be entered. The hash serves as a unique identifier for the file, ensuring that the correct file is downloaded and verifying its integrity. Here's why this is necessary:File Verification: By entering the hash, users confirm they are accessing the correct file, which prevents accidental downloads of unrelated or potentially harmful files. Security Measure: The hash requirement adds an additional layer of security, helping to prevent unauthorized downloads or distribution of sensitive files. This practice ensures accurate and secure file management within ICDm.
Which report template type should an administrator utilize to create a daily summary of network threats detected?
To create a daily summary of network threats detected, an administrator should use the Network Risk Report template. This report template provides a comprehensive overview of threats within the network, including:Summary of Threats Detected: It consolidates data on threats, providing a summary of recent detections across the network.Insight into Network Security Posture: The report helps administrators understand the types and frequency of network threats, enabling them to make informed decisions on security measures. Daily Monitoring: Using this report on a daily basis allows administrators to maintain an up-to-date view of the network's risk profile and respond promptly to emerging threats. The Network Risk Report template is ideal for regular monitoring of network security events.
Post your Comments and Discuss Broadcom 250-580 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 250-580 content, but please register or login to continue.