Q15. Which IPS Signature type is Primarily used to identify specific unwanted traffic?

Q16. What version number is assigned to a duplicated policy?

Q17. Which two (2) skill areas are critical to the success of incident Response Teams (Select two)

Q18. Which framework, open and available to any administrator, is utilized to categorize adversarial tactics and for each phase of a cyber attack?

Q19. Which term or expression is utilized when adversaries leverage existing tools in the environment?

Q20. What is the frequency of feature updates with SES and the Integrated Cyber Defense Manager (ICDm)

Q21. Which Endpoint > Setting should an administrator utilize to locate unmanaged endpoints on a network subnet?

Q22. Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?

Q23. Which dashboard should an administrator access to view the current health of the environment?

Q24. Which two (2) scan range options are available to an administrator for locating unmanaged endpoints? (Select two)

Q25. Which file should an administrator create, resulting Group Policy Object (GPO)?

Q26. Which rule types should be at the bottom of the list when an administrator adds device control rules?

Q27. Which report template includes a summary of risk distribution by devices, users, and groups?

Q28. Which Symantec component is required to enable two factor authentication with VIP on the Integrated Cyber Defense manager (ICDm)?

Q29. Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

Q30. Files are blocked by hash in the blacklist policy.
Which algorithm is supported, in addition to MD5?

Q31. Which report template type should an administrator utilize to create a daily summary of network threats detected?

Q32. Which technique randomizes the e memory address map with Memory Exploit Mitigation?

Q33. Which two (2) options is an administrator able to use to prevent a file from being fasely detected (Select two)

Q34. Which type of security threat is used by attackers to exploit vulnerable applications?

Q35. Which default role has the most limited permission in the Integrated Cyber Defense Manager?

Q36. An administrator suspects that several computers have become part of a botnet. What should the administrator do to detect botnet activity on the network?