QUESTION NO: 1
Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)
Which two (2) steps should an administrator take to guard against re-occurring threats? (Select two)
Correct Answer: A,D
Vote an answer
QUESTION NO: 2
Which type of security threat is used by attackers to exploit vulnerable applications?
Which type of security threat is used by attackers to exploit vulnerable applications?
Correct Answer: B
Vote an answer
QUESTION NO: 3
An endpoint is offline, and the administrator issues a scan command. What happens to the endpoint when it restarts, if it lacks connectivity?
An endpoint is offline, and the administrator issues a scan command. What happens to the endpoint when it restarts, if it lacks connectivity?
Correct Answer: B
Vote an answer
QUESTION NO: 4
Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?
Which Firewall Stealth setting prevents OS fingerprinting by sending erroneous OS information back to the attacker?
Correct Answer: D
Vote an answer
QUESTION NO: 5
Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?
Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?
Correct Answer: A
Vote an answer
QUESTION NO: 6
Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?
Which SES advanced feature detects malware by consulting a training model composed of known good and known bad fries?
Correct Answer: C
Vote an answer
QUESTION NO: 7
A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.
Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?
A user downloads and opens a PDF file with Adobe Acrobat. Unknown to the user, a hidden script in the file begins downloading a RAT.
Which Anti-malware engine recognizes that this behavior is inconsistent with normal Acrobat functionality, blocks the behavior and kills Acrobat?
Correct Answer: A
Vote an answer
QUESTION NO: 8
In which phase of MITRE framework would attackers exploit faults in software to directly tamper with system memory?
In which phase of MITRE framework would attackers exploit faults in software to directly tamper with system memory?
Correct Answer: B
Vote an answer