Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Symantec 250-561 Practice Exam with Questions & Answers

Questions 1

Which SES feature helps administrator apply policies based on specific endpoint profiles?

Options:
A.

Device Groups

B.

Device Profiles

C.

Policy Bundles

D.

Policy Groups

Symantec 250-561 Premium Access
Questions 2

Which file property does SES utilize to search the VirusTotal website for suspicious file information?

Options:
A.

File reputation

B.

File size

C.

File name

D.

File hash

Questions 3

Which Antimalware technology is used after all local resources have been exhausted?

Options:
A.

Sapient

B.

ITCS

C.

Emulator

D.

Reputation

Questions 4

What happens when an administrator blacklists a file?

Options:
A.

The file is assigned to the Blacklist task list

B.

The file is automatically quarantined

C.

The file is assigned to a chosen Blacklist policy

D.

The file is assigned to the default Blacklist policy

Questions 5

A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.

Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the

behavior and kills Acrobat?

Options:
A.

SONAR

B.

Sapient

C.

IPS

D.

Emulator

Questions 6

Which alert rule category includes events that are generated about the cloud console?

Options:
A.

Security

B.

Diagnostic

C.

System

D.

Application Activity

Questions 7

Which IPS Signature type is Primarily used to identify specific unwanted traffic?

Options:
A.

Attack

B.

Probe

C.

Audit

D.

Malcode

Questions 8

Which SES security control protects against threats that may occur in the Impact phase?

Options:
A.

Device Control

B.

IPS

C.

Antimalware

D.

Firewall

Questions 9

Which dashboard should an administrator access to view the current health of the environment?

Options:
A.

The Antimalware Dashboard

B.

The SES Dashboard

C.

The Device Integrity Dashboard

D.

The Security Control Dashboard

Questions 10

Which default role has the most limited permission in the Integrated Cyber Defense Manager?

Options:
A.

Restricted Administrator

B.

Limited Administrator

C.

Server Administrator

D.

Endpoint Console Domain Administrator

Exam Code: 250-561
Certification Provider: Symantec
Exam Name: Endpoint Security Complete - Administration R1
Last Update: Jul 10, 2025
Questions: 70