Symantec 250-561 考試概覽:

認證廠商:	Broadcom (Symantec)
考試名稱:	Symantec Endpoint Security Complete Administration R1
考試代碼:	250-561
相關認證:	Symantec Endpoint Security Symantec Security Products Administration
支援語言:	英文
考試形式:	選擇題, 情境分析題
範例考題:	Symantec 250-561 範例考題
考試方式:	線上監考或授權測試中心進行（依地區而異）
必備條件:	建議具備端點安全概念以及 Windows/Linux 管理的基本瞭解。

Symantec 250-561 考試大綱：

主題	簡介
主題 1	Describe SES Complete content update types and how they are distributed to endpoints Describe the requirements to enable Endpoint
主題 2	Describe how to use EDR to retrieve and submit files for analysis Describe how EDR can be used to quarantine endpoint devices
主題 3	Describe the incident lifecycle and steps required to identify a threat Describe the benefits of SES Complete Cloud-based management
主題 4	Describe the various methods for enrolling SES endpoint agents Introduction to Symantec Endpoint Security Complete
主題 5	Understand how Sites and Replication are impacted in a Hybrid environment Understand the Threat landscape and the MITRE ATT&CK Framework
主題 6	Describe the SES Complete policy and device groups and how they are used Describe how to use ICDm to configure administrative reports
主題 7	Describe how EDR assists in identifying suspicious and malicious activity Describe how EDR can be used to block and quarantine suspicious files
主題 8	Describe how Threat Defense for Active Directory is used to identify threats Describe how SES Complete can be used in preventing an attacker from accessing the environment
主題 9	Describe how SES Complete's mobile technologies protection against malicious networks Understand how policies are used to protect endpoint devices
主題 10	Describe how SES Complete blocks Command & Control communication Describe how SES Complete prevents threat execution
主題 11	Describe the configuration and use of the Endpoint Activity Recorder Describe the ways in which ICDm can be used to remediate threats