Symantec Symantec Certifications 250-253 Questions & Answers

• Question 41:

  What is commonly observed during the Notification phase of Risk Reduction?

  A. a significant drop in incident volume

  B. improved business processes

  C. more business unit involvement

  D. improved employee communication

  Correct Answer: A

• Question 42:

  The failover service group websg is online when it is frozen persistently. The cluster is stopped by running the command hastop -all -force.

  What happens to the websg service group after all of the systems have the cluster started?

  A. websg remains ONLINE in the cluster.

  B. websg remains OFFLINE in the cluster.

  C. websg is AUTODISABLE on all systems in the cluster.

  D. websg starts to ONLINE on the first system listed in its AutoStart list.

  Correct Answer: A

• Question 43:

  Which two products are required for quarantining confidential files residing inappropriately on a public file share? (Select two.)

  A. Network Discover

  B. Endpoint Discover

  C. Network Monitor

  D. Network Prevent

  E. Network Protect

  Correct Answer: AE

• Question 44:

  The failover service group named websg is FROZEN and is ONLINE/PARTIAL in a two-node cluster. The

  power is unplugged from the system on which websg is ONLINE/PARTIAL.

  Consider the configuration file below:

  group wewbsg (

  SystemList = { sym1 = 1, sym2 = 2 }

  AutoFailover = 1

  AutoStartList = { sym1, sym2 }

  Parallel = 0)

  What will be the state of websg on the surviving system?

  A. AutoDisabled

  B. OFFLINE

  C. FROZEN

  D. ONLINE/PARTIAL

  Correct Answer: B

• Question 45:

  What is the sequence of message processing for Network Monitor?

  A. Packet Capture -> File Reader -> Incident Writer

  B. Detection -> Packet Capture -> Incident Writer

  C. Incident Persister -> Manager -> Notifier

  D. Incident Persister -> File Reader -> Manager

  Correct Answer: A

• Question 46:

  Under which circumstance should the ManageFaults service group attribute be set to NONE?

  A. to turn off manual control of a service group

  B. to prevent a hung resource from stopping a failover

  C. to help in problem analysis when a resource faults

  D. to place the resource in a STALE_ADMIN_WAIT state

  Correct Answer: C

• Question 47:

  Refer to the exhibit.

  

  On which node will the websg service group start if all nodes are powered on and come online at the same time?

  A. sym1

  B. sym2

  C. sym3

  D. sym4

  Correct Answer: B

• Question 48:

  Where can an incident responder find the exact location of the file copy created by the Protect: Copy File response action?

  A. in the Incident Snapshot

  B. in the Marker File

  C. in the System Event

  D. in the Discover Target configuration

  Correct Answer: A

• Question 49:

  Which feature is a key benefit of onscreen notification?

  A. It informs endpoint users when an Endpoint Discover scan identifies confidential files on their computers.

  B. It informs endpoint users when they try to copy or transmit confidential data from the endpoint.

  C. It informs endpoint users that the DLP agent has just been installed on their computers.

  D. It informs the system administrator when specified system events have occurred within the system.

  Correct Answer: B

• Question 50:

  A policy manager wants to apply policies only to certain employees with a specific classification level. Which TrueMatch detection method can help accomplish this?

  A. Directory Group Matching (DGM)

  B. Exact Data Matching (EDM)

  C. Described Content Matching (DCM)

  D. Indexed Document Matching (IDM)

  Correct Answer: A