QUESTION 20
Which IPS Signature type is Primarily used to identify specific unwanted traffic?

QUESTION 21
What is the primary issue pertaining to managing roaming users while utilizing an on-premise solution?

QUESTION 22
What does SES’s advanced search feature provide when an administrator searches for a specific term?

QUESTION 23
Files are blocked by hash in the blacklist policy.
Which algorithm is supported, in addition to MD5?

QUESTION 24
An administrator suspects that several computers have become part of a botnet. What should the administrator do to detect botnet activity on the network?

QUESTION 25
An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity. What should an administrator do to display only high risk files?

QUESTION 26
Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)

QUESTION 27
Which antimalware intensity level is defined by the following: “Blocks files that are most certainly bad or potentially bad files. Results in a comparable number of false positives and false negatives.”

QUESTION 28
Which report template type should an administrator utilize to create a daily summary of network threats detected?

QUESTION 29
Which Anti-malware technology should an administrator utilize to expose the malicious nature of a file created with a custom packet?

QUESTION 30
Which report template includes a summary of risk distribution by devices, users, and groups?

QUESTION 31
Which communication method is utilized within SES to achieve real-time management?

QUESTION 32
Which term or expression is utilized when adversaries leverage existing tools in the environment?

QUESTION 33
What must an administrator check prior to enrolling an on-prem SEPM infrastructure into the cloud?

QUESTION 34
Which option should an administrator utilize to temporarily or permanently block a file?

QUESTION 35
What happens when an administrator blacklists a file?

QUESTION 36
After editing and saving a policy, an administrator is prompted with the option to apply the edited policy to any assigned device groups.
What happens to the new version of the policy if the administrator declines the option to apply it?

QUESTION 37
Which two (2) skill areas are critical to the success of incident Response Teams (Select two)

QUESTION 38
Which two (2) Discovery and Deploy features could an administrator use to enroll MAC endpoints? (Select two)

QUESTION 39
Which two (2) options is an administrator able to use to prevent a file from being fasely detected (Select two)