最新的Symantec Certified Security program認證 ST0-134考試題庫

問題1

Which two options can administrators customize on the Home page? (Select two.)

A. Common Tasks

B. Favorite Reports

C. Number of report

D. Auto-refresh rate

E. Types of endpoints listed

正確答案: B,D

問題2

Which two options are available when configuring high risk detection in SONAR? (Select two.)

A. Block

B. Delete

C. Skip

D. Quarantine

E. Log

正確答案: D,E

問題3

A company recently purchased the Symantec Endpoint Protection 12.1 (SEP) product. It has two datacenters and wants to configure SEP for high availability, so that if one datacenter goes down, the SEP clients can smoothly fail over to the other datacenter. What should be done to allow SEP clients to fail over from one datacenter to the next?

A. Install a Group Update Provider at each datacenter and configure replication.

B. Install a Symantec Site Server at each datacenter and configure replication.

C. Install a Symantec Protection Center at each datacenter and configure replication.

D. Install a Symantec Endpoint Protection Manager at each datacenter and configure replication.

正確答案: D

問題4

An administrator has defined a rule to allow traffic to and from a specific server by its Fully Qualified Domain Name (FQDN), because the server's IP address varies based on the office in which a client is located. The administrator attempts to verify the rule and finds that the traffic is being blocked. The logs list the IP address of the server instead of its FQDN. What does the administrator need to do within the firewall policy to allow the rule to work correctly?

A. Disable Smart DNS.

B. Enable DNS lookup

C. Enable reverses DNS lookup.

D. Disable NetBIOS Protection

正確答案: C

問題5

A Symantec Endpoint Protection 12.1 client is running a user-defined scan when a scheduled, administrator-defined scan is scheduled to launch. What is the effect on the client?

A. The user-defined scan will be paused in order to launch the administrator-defined scan.

B. The administrator-defined scan will be skipped and the user-defined scan will continue.

C. The user-defined scan will be canceled in order to launch the administrator-defined scan.

D. The administrator-defined scan will launch after the user-defined scan completes.

正確答案: D

問題6

Which policy should an administrator modify to enable Virtual Image Exception (VIE) functionality?

A. Virus and Spyware Protection Policy

B. Host Integrity Policy

C. Application and Device Control Policy

D. Exceptions Policy

正確答案: A

問題7

Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?

A. Symantec Endpoint Protection client

B. Shared Insight Cache server

C. Symantec Endpoint Protection Manager

D. LiveUpdate Administrator server

正確答案: A

問題8

Refer to the exhibit.

A USB mouse is plugged in to a system that uses the device control displayed in the exhibit. What is the expected behavior?

A. The mouse is blocked until the user adds the device as a local client exception.

B. The mouse will work as normal because Mouse devices are missing from Blocked Devices.

C. The mouse is blocked until an administrator adds the device to the exception policy.

D. The mouse will work as normal because the Human Interface Device exclusion takes precedence.

正確答案: D

問題9

A company organizes its clients into two groups the Symantec Endpoint Protection Manager (SEPM) group with all the SEPMs and a Desktops group with all other systems. An Application and Device Control policy is used with the "Block modifications to hosts file" rule set enabled. This policy is applied to all groups in the company. How can an administrator modify the hosts file on the SEPM systems, while minimizing risks posed to the company?

A. Withdraw the policy from the SEPM group, modify the hosts files, and reassign the policy.

B. Withdraw the policy from all clients, modify the hosts files, and reassign the policy.

C. Temporarily disable Network Threat Protection on each client when modifying the hosts file.

D. Modify the hosts file using an operating system-based system account.

正確答案: A

問題10

An administrator created a Symantec Endpoint Protection 12.1 (SEP) installation package
without specifying the group to which the SEP clients should belong. What will happen when the administrator tries to install a SEP client using the installation package?

A. The SEP client will be installed into a default group.

B. The Symantec Endpoint Protection Manager will prompt the administrator to specify a group.

C. The SEP client will prompt the administrator to specify a group.

D. The SEP client installation will fail.

正確答案: A

問題11

How many Symantec Endpoint Protection Managers can connect to an embedded database?

A. two

B. four

C. unlimited

D. one

正確答案: B

問題12

An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear. What is the likely problem?

A. The clients are in a trusted Symantec Endpoint Protection domain.

B. The Symantec Endpoint Protection Manager is installed on a Domain Controller.

C. The Learn applications that run on the client computers setting is disabled.

D. The client computers already have exclusions for the applications.

正確答案: C

問題13

According to Symantec, what is a botnet?

A. groups of computers configured to steal credit card records

B. systems infected with the same virus strain

C. groups of systems performing remote tasks without the users' knowledge

D. compromised systems opening communication to an IRC channel

正確答案: C

最新的Symantec EndPoint Protection 12.1 Technical Assessment - ST0-134免費考試真題

最新更新

站內鏈接

聯系我們