Pass the Symantec Certified Specialist 250-586 Questions and answers with ExamsMirror

When configuringDNS change detection for SONAR, two available options areBlockandLog. These options allow administrators to define how SONAR should respond to unexpected or suspicious DNS changes.

Block: This option enables SONAR to immediately block DNS changes that it detects as potentially malicious, preventing suspicious DNS redirections that could expose endpoints to threats like phishing or malware sites.

Log: Selecting Log allows SONAR to record DNS changes without taking direct action. This option is useful for monitoring purposes, providing a record of changes for further analysis.

Explanation of Why Other Options Are Less Likely:

Option B (Active Response)andOption C (Quarantine)are generally associated with threat responses but are not specific to DNS change detection.

Option E (Trace)is not an available response option for DNS changes in SONAR.

Therefore, the correct options for configuringDNS change detected for SONARareBlockandLog.

TheIntegrated Cyber Defense Manager (ICDm)is used tomanage both cloud-based and hybrid endpointswithin the Symantec Endpoint Security environment. ICDm serves as a unified console,enabling administrators to oversee endpoint security configurations, policies, and events across both fully cloud-hosted and hybrid environments, where on-premises and cloud components coexist. This integrated approach enhances visibility and simplifies management across diverse deployment types.

Symantec Endpoint Security Documentationhighlights ICDm’s role in providing centralized management for comprehensive endpoint security, whether the endpoints are cloud-based or part of a hybrid architecture.