[Q76-Q100] Certification Training for 250-605 Exam Dumps Test Engine [2026]

QUESTION 76
How does SEDR improve visibility across a security environment compared to traditional antivirus tools?

QUESTION 77
What are two key indicators used by SEDR to identify potential malicious behavior?
(Choose two)

QUESTION 78
Which two actions can System Lockdown perform when an unauthorized application is detected?
(Choose two)

QUESTION 79
Which two report types in SEPM help monitor virus and spyware activity across Windows clients?
(Choose two)

QUESTION 80
When configuring a scheduled report in SEPM, which two parameters must be defined?
(Choose two)

QUESTION 81
Which port must be open on a GUP to allow other clients to request updates?

QUESTION 82
Which two elements are most important when designing a scalable SEDR deployment for an enterprise?
(Choose two)

QUESTION 83
When monitoring Device Control events, which SEP log category provides visibility into blocked or allowed hardware interactions?

QUESTION 84
What priority would an incident that may have an impact on business be considered?

QUESTION 85
What file extension is commonly used for manual installation of virus definitions into SEPM?

QUESTION 86
Which option allows SEP administrators to configure exceptions for applications that require special network access rules?

QUESTION 87
Which tab in the SEPM client interface provides a consolidated view of policy compliance, security status, and scan results for each endpoint?

QUESTION 88
When analyzing security events, what is the primary role of the Logs page in SEPM?

QUESTION 89
How can SEDR event data be forwarded to external systems for further analysis?

QUESTION 90
What are two ways to monitor applied Security Exceptions in a SEP environment?

QUESTION 91
Which factor most influences the data retention duration in a SEDR environment?

QUESTION 92
Which type of activity does SEDR primarily analyze to detect threats in the environment?

QUESTION 93
How are role-based access controls (RBAC) implemented in the SEDR Management Console?

QUESTION 94
Which feature of SEP allows administrators to block USB storage devices on both Windows and Mac clients?

QUESTION 95
What is the primary goal of the Memory Exploit Mitigation (MEM) feature in Symantec Endpoint Protection (SEP)?

QUESTION 96
Which of the following components is a core part of the Symantec Endpoint Detection and Response (SEDR) architecture?

QUESTION 97
Which two methods can administrators use to reduce bandwidth consumption during content distribution in large environments?
(Choose two)

QUESTION 98
How does the Command Status view help administrators evaluate client management actions?

QUESTION 99
Why would an organization use location-based policies in SEP?

QUESTION 100
Which function does the SEP Firewall Policy primarily serve in a corporate environment?