Symantec SCS 250-315 Questions & Answers

• Question 1:

  A company needs to configure an Application and Device Control policy to block read/write access to all USB removable media on its Symantec Endpoint Protection (SEP) systems.

  Which tool should an administrator use to format the GUID and device IDs as required by SEP?

  A. CheckSum.exe

  B. DeviceTree.exe

  C. TaskMgr.exe

  D. DevViewer.exe

  Correct Answer: D

• Question 2:

  A Symantec Endpoint Protection Manager (SEPM) administrator notices performance issues with the SEPM server. The Client tab becomes unresponsive in the SEPM console and .DAT files accumulate in the "agentinfo" folder.

  Which tool should the administrator use to gather log files to submit to Symantec Technical Support?

  A. collectLog.cmd

  B. LogExport.exe

  C. ExportLog.vbs

  D. smc.exe

  Correct Answer: A

• Question 3:

  An administrator reports that the Home, Monitors, and Report pages are absent in the Symantec Endpoint Protection Management console when the administrator logs on.

  Which action should the administrator perform to correct the problem?

  A. configure proxy settings for each server in the site

  B. configure External Logging to Enable Transmission of Logs to a Syslog Server

  C. grant the Administrator Full Access to Root group of the organization

  D. grant View Reports permission to the administrator

  Correct Answer: D

• Question 4:

  Refer to the exhibit.

  

  An administrator has configured the Symantec Endpoint Protection Manager (SEPM) to use Active Directory authentication. The administrator defines a new Symantec Endpoint Protection administrator named Sep_SysAdmin, configured to use Directory Authentication.

  Which password needs to be entered when the administrator logs in to the SEPM console as Sep_SysAdmin?

  A. The password for the Active Directory account Nova_Grant

  B. The password for the SEPM account Nova_Grant

  C. The password for the Active Directory account Sep_SysAdmin

  D. The password for the SEPM account Sep_SysAdmin

  Correct Answer: A

• Question 5:

  Which action can an administrator take to improve the Symantec Endpoint Protection Manager (SEPM) dashboard performance and report accuracy?

  A. decreasing the number of content revisions to keep

  B. lowering the client installation log entries

  C. rebuilding database indexes

  D. limiting the number of backups to keep

  Correct Answer: C

• Question 6:

  You have just started a relayout operation in a live test environment, and you want to limit the impact of your work on concurrent testing activities. You also want to accommodate the need to constrain a relayout job's performance impact on concurrent activities.

  What would you do to perform this task?

  A. Use the "set iodelay" option of vxtask to throttle the VxVM task.

  B. Use the "set iowait" option of vxtask to throttle the VxVM task.

  C. Use the "set slow" option of vxtask to throttle the VxVM task.

  D. Use the "set nice" option of vxtask to throttle the VxVM task.

  Correct Answer: C

• Question 7:

  An administrator is recovering from a Symantec Endpoint Manager (SEPM) site failure.

  Which file should the administrator use during an install of SEPM to recover the lost environment according to Symantec Disaster Recovery Best Practice documentation?

  A. original installation log

  B. recovery_timestamp file

  C. settings.properties file

  D. Sylink.xml file from the SEPM

  Correct Answer: B

• Question 8:

  An administrator is troubleshooting a Symantec Endpoint Protection (SEP) replication.

  Which component log should the administrator check to determine whether the communication between the two sites is working correctly?

  A. Apache Web Server

  B. Tomcat

  C. SQL Server

  D. Group Update Provider (GUP)

  Correct Answer: B

• Question 9:

  An administrator plans to implement a multi-site Symantec Endpoint Protection (SEP) deployment. The administrator needs to determine whether replication is viable without needing to make network firewall changes or change defaults in SEP.

  Which port should the administrator verify is open on the path of communication between the two proposed sites?

  A. 1433

  B. 2967

  C. 8014

  D. 8443

  Correct Answer: D

• Question 10:

  Which action must a Symantec Endpoint Protection administrator take before creating custom Intrusion Prevention signatures?

  A. change the custom signature order

  B. create a Custom Intrusion Prevention Signature library

  C. define signature variables

  D. enable signature logging

  Correct Answer: B