Endpoint Security Complete - R2 Technical Specialist

Here you have the best Symantec 250-580 practice exam questions

You have 150 total questions to study from
Each page has 5 questions, making a total of 30 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on January 4, 2026
This site is not affiliated with or endorsed by Symantec.

Question 1 of 150

What permissions does the Security Analyst Role have?

Trigger dumps, get & quarantine files, enroll new sites

Search endpoints, trigger dumps, get & quarantine files

Trigger dumps, get & quarantine files, create device groups

Search endpoints, trigger dumps, create policies

Correct Answer: B

Question 2 of 150

What version number is assigned to a duplicated policy?

The original policy's version number

Zero

The original policy's number plus one

One

Correct Answer: C

Question 3 of 150

Why is it important for an Incident Responder to review Related Incidents and Events when analyzing an incident for an After Actions Report?

It ensures that the Incident is resolved, and the threat does not continue to spread to other parts of the environment.

It ensures that the Incident is resolved, and future threats are automatically remediated.

It ensures that the Incident is resolved, and the responder is able to close the incident in the SEDR manager.

It ensures that the Incident is resolved, and the responder can determine the best remediation method.

Correct Answer: A

Question 4 of 150

How does IPS check custom signatures?

IPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine continues checking for other signatures.

IPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine restarts checking for signatures.

IPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine stops checking other signatures.

IPS checks for signatures listed in the table. When a detection matches an inbound or outbound traffic packet, the IPS engine logs the other signatures.

Correct Answer: A

Question 5 of 150

What information is required to calculate retention rate?

Number of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size

Number of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size

Number of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size

Number of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size

Correct Answer: D