Free 250-550 Exam Braindumps
Symantec Endpoint Security Planning Implementation and Administration R1 Questions 21–25 (page: 6)

Updated On: 9-Feb-2026

An administrator suspects that several computers have become part of a botnet. What should the administrator do to detect botnet activity on the network?

  1. Enable the Command and Control Server Firewall
  2. Add botnet related signatures to the IPS policy's Audit Signatures list
  3. Enable the IPS policy's Show notification on the device setting
  4. Set the Antimalware policy's Monitoring Level to 4

Answer(s): A



Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

  1. Sandbox
  2. SONAR
  3. Reputation
  4. Emulator

Answer(s): A



An endpoint is offline, and the administrator issues a scan command. What happens to the endpoint when it restarts, if it lacks connectivity?

  1. The system is scanning when started.
  2. The system downloads the content without scanning.

  3. The system starts without scanning.
  4. The system scans after the content update is downloaded.

Answer(s): B



Which type of security threat is used by attackers to exploit vulnerable applications?

  1. Lateral Movement
  2. Privilege Escalation
  3. Command and Control
  4. Credential Access

Answer(s): B



What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

  1. The endpoint is missing timely policy update
  2. The endpoint is absent of the management console
  3. The endpoint fails to receive content update
  4. The endpoint is more exposed to threats

Answer(s): C



Viewing page 6 of 15
Viewing questions 26 - 30 out of 70 questions


Post your Comments and Discuss Symantec 250-550 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!