Online Access Free 250-604 Exam Questions

What does SES Complete do to block Command & Control (C2) communication attempts?

• A.It filters out all inbound traffic
• B.It disables all external DNS lookups
• C.It uses predefined detection models and network rules
• D.It restricts browser usage policies

Why is it important to configure and deploy the Threat Defense for Active Directory policy after successful installation?

• A.It activates the security monitoring rules necessary for identifying lateral movement and AD abuse.
• B.It ensures the detection engine is synchronized with mobile threat prevention.
• C.It registers endpoints as DNS relay hosts to enhance auditing capability.
• D.It enables logging of all user profile access attempts on all endpoints.

Which controls can prevent an attacker from executing malicious scripts in SES Complete? (Choose two)

• A.Script Blocking
• B.Application Control
• C.Patch Management
• D.Device Lockdown

Which ICDm capability supports identifying threats across multiple endpoints by aggregating alert data?

• A.Unified Incident View
• B.Cloud Lookup Engine
• C.DNS Activity Tracker
• D.SIEM Synchronization Console

Scenario:
A global company is deploying SES Complete across multiple remote offices. Some offices lack local servers, and devices often operate outside of the corporate network. The analyst is tasked with deploying agents efficiently and maintaining centralized control.
What are the best actions a security analyst should take to ensure endpoint protection across distributed offices?

• A.Use ICDm to enforce policies across all regions
• B.Configure SEPM for standalone policy management
• C.Deploy agents with embedded auto-enrollment credentials
• D.Require users to manually install agents from a shared drive
• E.Enable cloud-based automatic content updates