10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The 250-611 exam has 75 questions and runs 1 hour 30 minutes.
These 10 free 250-611 questions are organized by exam domain, so you can see how each part of the Symantec Data Center Security - Server Advanced 6.x Technical Specialist blueprint is tested. Reveal the answer and explanation under each question.
Which statement BEST describes the primary advantage of a host intrusion prevention system over a network intrusion detection system?
Correct answer: B - It blocks the unauthorized action on the host before it completes
An organization is planning a DCS:SA deployment for 32,000 agents. Based on documented capacity guidance, what is the minimum number of Communication Servers required?
Correct answer: C - 4
A newly deployed agent registers successfully and its events appear in the console, but it never receives policy updates pushed from the management server. Which port should the administrator verify FIRST?
Correct answer: D - TCP 2222 inbound to the agent
During DCS:SA server installation, which SQL Server instance name should be specified instead of accepting the installer default?
Correct answer: A - SCSP
Which element of a DCS:SA prevention policy determines the sandbox to which a running program is assigned?
Correct answer: C - Process binding rules
In the predefined Targeted prevention policy for Windows, what is the default process access control setting applied across sandboxes?
Correct answer: D - Writeable
Two process access control lists apply to the same process within a single sandbox. Which list does the agent enforce?
Correct answer: A - The least restrictive of the two
A prevention policy must be deployed to 200 production application servers with minimal risk of service disruption. What should the administrator do FIRST?
Correct answer: C - Apply the policy with prevention disabled and review the resulting events
Which DCS:SA policy type uses code segment collectors to acquire information from the host system, such as recorded security events, log creation, and registry key modifications?
Correct answer: B - Detection
An administrator runs the agent configuration tool with the -rtfim off option on a protected host. What is the effect on file integrity monitoring?
Correct answer: B - Monitoring continues on a polling basis at a configured interval
The 250-611 exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more 250-611 questions with explanations.
Continue in the free practice test →
View plans