Symantec SCS 250-315 Questions & Answers

• Question 111:

  Which two Symantec Endpoint Protection components are used to distribute content updates? (Select two.)

  A. Group Update Provider (GUP)

  B. Shared Insight Cache Server

  C. Symantec Protection Center

  D. Symantec Endpoint Protection Manager

  E. Symantec Insight Database

  Correct Answer: AD

• Question 112:

  What is the file scan workflow order when Shared Insight Cache and reputation are enabled?

  A. Symantec Insight > Shared Insight Cache server > local client Insight cache

  B. Local client Insight cache > Shared Insight Cache server > Symantec Insight

  C. Shared Insight Cache server > local client Insight cache > Symantec Insight

  D. Local client Insight cache > Symantec Insight > Shared Insight Cache server

  Correct Answer: B

• Question 113:

  Which Symantec Endpoint Protection component enables access to data through ad-hoc reports and charts with pivot tables?

  A. Symantec Protection Center

  B. Shared Insight Cache Server

  C. Symantec Endpoint Protection Manager

  D. IT Analytics

  Correct Answer: D

• Question 114:

  Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?

  A. verify that dbsrv11.exe is listening on port 2638

  B. check whether the MSSQLSERVER service is running

  C. verify the sqlserver.exe service is running on port 1433

  D. check the database transaction logs in X:\Program Files\Microsoft SQL server

  Correct Answer: A

• Question 115:

  Which Symantec Endpoint Protection technology blocks a downloaded program from installing browser plugins?

  A. Intrusion Prevention

  B. SONAR

  C. Application and Device Control

  D. Tamper Protection

  Correct Answer: C

• Question 116:

  Which technology can prevent an unknown executable from being downloaded through a browser session?

  A. Browser Intrusion Prevention

  B. Download Insight

  C. Application Control

  D. SONAR

  Correct Answer: B

• Question 117:

  Users report abnormal behavior on systems where Symantec Endpoint Protection is installed.

  Which tool can an administrator run on the problematic systems to identify the likely cause of the abnormal behavior?

  A. smc.exe -stop

  B. SymHelp.exe

  C. PowerShell.exe

  D. CleanWipe.exe

  Correct Answer: B

• Question 118:

  In addition to performance improvements, which two benefits does Insight provide? (Select two.)

  A. Reputation scoring for documents

  B. Zero-day threat detection

  C. Protection against malicious java scripts

  D. False positive mitigation

  E. Blocking of malicious websites

  Correct Answer: BD

• Question 119:

  A financial company enforces a security policy that prevents banking system workstations from connecting to the Internet.

  Which Symantec Endpoint Protection technology is ineffective on this company's workstations?

  A. Insight

  B. Intrusion Prevention

  C. Network Threat Protection

  D. Browser Intrusion Prevention

  Correct Answer: A