Free Broadcom 250-580 Exam Questions

Become Broadcom Certified with updated 250-580 exam questions and correct answers

Page: 1 / 31

Total 152 Questions | Updated On: Feb 18, 2025

Add To Cart

Question 1

What information is required to calculate retention rate?

A : Number of endpoints, EAR data per endpoint per day, available disk space, number of endpoint dumps, dump size

B : Number of endpoints, available bandwidth, available disk space, number of endpoint dumps, dump size

C : Number of endpoints, available bandwidth, number of days to retain, number of endpoint dumps, dump size

D : Number of endpoints, EAR data per endpoint per day, number of days to retain, number of endpoint dumps, dump size

Answer: D

Question 2

Which type of event does operation:1indicate in a SEDR database search?

A : File Deleted.

B : File Closed.

C : File Open.

D : File Created.

Answer: C

Question 3

What are the two (2) locations where an Incident Responder should gather data for an After Actions Report in SEDR? (Select two)

A : Incident Manager

B : Policies

C : Syslog

D : Action Manager

E : Endpoint Search

Answer: A,C

Question 4

What is the difference between running Device Control for a Mac versus Windows?

A : Mac Device Control runs at thedriver level.It enforces control only on Apple supported devices.

B : Mac Device Control runs at thevolume level.It enforces control only on storage devices. OC.Mac Device Control runs at thekernel level.It enforces control only on built-in devices.

C : Mac Device Control runs at theuser level.It enforces control only on iCIoud storage.

Answer: B

Question 5

Which EDR feature is used to search for real-time indicators of compromise?

A : Domain search

B : Endpoint search

C : Cloud Database search

D : Device Group search

Answer: B

Page: 1 / 31

Total 152 Questions | Updated On: Feb 18, 2025

Add To Cart