Broadcom Symantec Endpoint Security Complete Admin R1.4 Technical Specialist

QUESTION NO: 1
Which prerequisite is necessary before deploying Threat Defense for Active Directory (TDAD) in SES Complete?

A. Installation of the TDAD sensor on a domain controller B. Activation of Network Integrity policies C. Configuration of LiveUpdate Administrator D. Integration of ICDm with Microsoft Intune

Correct Answer: A

QUESTION NO: 2
What is the purpose of Adaptive Protection's Monitor mode?

A. To gain visibility into the operational impact of unusual behavior B. To create a list of risky application behaviors C. To view the results of Symantec's behavioral global intelligence data analytics D. To deny unusual application behavior

Correct Answer: A

QUESTION NO: 3
What methods can administrators use to enroll endpoints into SES Complete? (Choose two)

A. Through SEP Mobile device scans B. Using domain-based deployment with Microsoft GPO C. Via ICDm using agent installation packages D. By importing certificates from third-party tools

Correct Answer: B,C

QUESTION NO: 4
How does SES Complete protect against malicious mobile apps?

A. Using SEPM-based group policies B. By scanning mobile apps for behavioral anomalies C. By enforcing two-factor authentication D. Through file integrity monitoring

Correct Answer: B

QUESTION NO: 5
Why is it critical for administrators to configure Network Integrity Policy settings accurately when implementing mobile device protection in SES Complete?

A. It allows for intelligent assessment and mitigation of compromised network behavior on mobile endpoints. B. It limits the ability of users to install third-party VPN applications. C. It allows the firewall module to prioritize email traffic above other protocols. D. It ensures that updates are blocked during roaming sessions.

Correct Answer: A

QUESTION NO: 6
How does SES Complete prevent data exfiltration from endpoints?

A. It blocks known malware sites only B. It disconnects devices from the network C. It deletes sensitive files periodically D. It restricts unauthorized data transmission channels

Correct Answer: D

QUESTION NO: 7
Why is versioning important for SES Complete policies?

A. It tracks user logins B. It enables mobile device management C. It improves malware detection speed D. It supports rollback and auditability of policy changes

Correct Answer: D

QUESTION NO: 8
Why is the use of real-time analysis critical in the context of Threat Defense for Active Directory's protection strategy?

A. Because it provides an instant shutdown command for all elevated user accounts B. Because it correlates backup schedules with login timestamps for user integrity C. Because it reduces latency in email spam filtering by redirecting logs D. Because it enables immediate visibility into suspicious AD activity that could indicate an ongoing attack

Correct Answer: D

QUESTION NO: 9
Scenario:
You've just deployed TDAD across your organization's domain controllers. During the baseline phase, you observe frequent, yet legitimate administrative activity. You want to avoid false positives while still preparing for enforcement.
Which two actions should you take? (Choose two)

A. Block all administrative logins until policies are finalized B. Use "Monitor Only" mode to observe and learn behavior C. Move to enforcement mode immediately to prevent attacks D. Refine detection thresholds and rules in the TDAD policy

Correct Answer: B,D

QUESTION NO: 10
What benefits does SES Complete offer through its cloud-native architecture? (Choose two)

A. Requires frequent manual updates B. Faster deployment without local infrastructure C. Policy updates limited to once per day D. Reduced administrative overhead

Correct Answer: B,D

QUESTION NO: 11
What method does SES Complete use to streamline agent enrollment for a large organization?

A. Automatic registration through Microsoft Defender B. Bulk enrollment through ICDm with client installation packages C. Endpoint configuration through Active Directory GPOs only D. Manual installation using USB drives

Correct Answer: B

QUESTION NO: 12
What function does ICDm provide to automate the removal of detected threats from endpoints?

A. Threat Remediation B. Policy Tuning C. App Control Lockdown D. File Retrieval

Correct Answer: A

QUESTION NO: 13
Which component in SES Complete is responsible for protecting mobile devices from malicious network activities?

A. Behavioral Insights Dashboard B. Network Integrity C. Mobile Threat Defense Gateway D. Endpoint Activity Recorder

Correct Answer: B

QUESTION NO: 14
How does EDR aid in investigating the lateral movement of threats across endpoints in a network?

A. By integrating third-party authentication alerts B. By logging DNS resolution times C. By visualizing process-level telemetry across affected endpoints D. By showing real-time firewall activity logs

Correct Answer: C

QUESTION NO: 15
During a compliance audit, you are asked to demonstrate how SES Complete prevents Command & Control (C2) connections and exfiltration of sensitive data.
What controls or configurations should you present? (Choose three)

A. Data Loss Prevention Policies B. DNS and IP Reputation Filtering C. USB Port Whitelisting D. Application Launch Monitoring E. Threat Intelligence Updates

Correct Answer: A,B,E

Broadcom Symantec Endpoint Security Complete Admin R1.4 Technical Specialist - 250-604 Exam Questions