250-614 무료 덤프문제 온라인 액세스

Which control helps reduce the attack surface by limiting allowed applications?

• A.Application Control
• B.Policy Versioning
• C.Device Grouping
• D.Content Updates

An attacker attempts credential theft using suspicious authentication behavior. Which SES Complete capability helps detect this activity?

• A.Application Control
• B.Adaptive Protection
• C.Threat Defense for Active Directory
• D.Host Integrity

A previously unseen executable attempts to run on an endpoint. Which Adaptive Protection action is most appropriate?

• A.Uninstall the endpoint agent
• B.Disable endpoint networking
• C.Restrict execution until reputation is established
• D.Allow execution permanently

Why is visibility into AD authentication activity critical?
Response:

• A.It increases reporting complexity
• B.It helps detect compromised accounts early
• C.It replaces endpoint telemetry
• D.It reduces system performance

An analyst wants to understand how a threat entered the environment. Which EDR feature supports this analysis?

• A.Event timeline reconstruction
• B.Alert suppression
• C.Policy versioning
• D.Device grouping