Broadcom Endpoint Security Complete Admin Technical Specialist (250-604) Certification Sample Questions

01. Which SES Policy protects against port scan detections?
a) IPS
b) Firewall
c) Device Control
d) Exploit Mitigation

02. What is the name of the cloud-based Management Console that is used to configure and manage an SES Complete implementation?
a) The Integrated Cyber Defense Manager (ICDm)
b) Symantec Endpoint Security Manager (SESM)
c) The Symantec Console (SC)
d) The Integrated Security Protection Manager (ISPm)

03. When should administrators configure automatic quarantine rules for endpoints in ICDm?
a) When endpoints are connected via VPN only
b) When endpoints are consistently offline
c) When a high-severity threat is detected based on predefined behavioral triggers
d) When bandwidth utilization crosses a set threshold

04. Which policy should an administrator edit to utilize the Symantec LiveUpdate server for pre-release content?
a) The System Policy
b) The LiveUpdate Policy
c) The System Schedule Policy
d) The Firewall Policy

05. How does EDR aid in investigating the lateral movement of threats across endpoints in a network?
a) By showing real-time firewall activity logs
b) By integrating third-party authentication alerts
c) By visualizing process-level telemetry across affected endpoints
d) By logging DNS resolution times

06. What is the purpose of Adaptive Protection’s Monitor mode?
a) To create a list of risky application behaviors
b) To view the results of Symantec’s behavioral global intelligence data analytics
c) To deny unusual application behavior
d) To gain visibility into the operational impact of unusual behavior

07. Why is it important to configure real-time threat identification in ICDm?
a) To accelerate OS patch deployment
b) To reduce licensing costs
c) To enable proactive detection and response
d) To improve email deliverability

08. Which features contribute to blocking data exfiltration in SES Complete?
(Choose two)
a) Network Integrity
b) Content Update Optimization
c) Data Loss Prevention Rules
d) Script Runner

09. What component of SES Complete handles blocking of suspicious file execution?
a) Activity Recorder
b) Application Control Engine
c) Detection and Prevention Engine
d) Device Integrity Monitor

10. Which antimalware engine detects a malicious file created with a custom packet?
a) Emulator
b) Sapient
c) Core3
d) SONAR