Symantec SCS 250-315 Questions & Answers

• Question 21:

  Which exception type can be configured?

  A. Parent Process

  B. Browser Object

  C. MAC Address

  D. Trusted Web Domain

  Correct Answer: D

• Question 22:

  An exception needs to be created for a file named "RunMe.exe" in a user's Windows 7 "My Documents" folder. The user's login name is Bob.

  Which method should be used?

  A. create a file exception for "RunMe.exe" with a Prefix Variable of [USERNAME]

  B. create a file exception for "[Drive]:\Users\Bob\My Documents\RunMe.exe"

  C. create a file exception for "*\RunMe.exe"

  D. create a file exception for "RunMe.exe" with a Prefix Variable of %USERPROFILE%

  Correct Answer: B

• Question 23:

  A company has a small number of systems in their Symantec Endpoint Protection Manager (SEPM) group with federal mandates that AntiVirus definitions undergo a two week testing period. After being loaded on the client, the tested virus definitions must remain unchanged on the client systems until the next set of virus definitions have completed testing. All other clients must remain operational on the most recent definition sets. An internal LiveUpdate Server has been considered as too expensive to be a solution for this company.

  What should be modified on the SEPM to meet this mandate?

  A. The LiveUpdate Settings policy for this group should be modified to use an Explicit Group Update Provider.

  B. The LiveUpdate Content policy for this group should be modified to use a specific definition revision.

  C. The SEPM site LiveUpdate settings should be modified so the Number of content revisions to keep is set to 1.

  D. The SEPM site LiveUpdate settings should be modified so the Number of content revisions to keep is set to 14.

  Correct Answer: B

• Question 24:

  Which client log shows that a client is downloading content from its designated source?

  A. Risk Log

  B. System Log

  C. SesmLu.log

  D. Log.LiveUpdate

  Correct Answer: B

• Question 25:

  Which two sources can a Macintosh client use to download content? (Select two.)

  A. Symantec Endpoint Protection Manager

  B. Group Update Provider (GUP)

  C. Internal LiveUpdate server

  D. Default Management server

  E. Symantec LiveUpdate server

  Correct Answer: CE

• Question 26:

  Which feature reduces the impact of Auto-Protect on a virtual client guest operating system?

  A. Network Shared Insight Cache

  B. Virtual Image Exception

  C. Scan Randomization

  D. Virtual Shared Insight Cache

  Correct Answer: B

• Question 27:

  Multiple Windows virtual clients running on an ESX server need to be scanned daily by a scheduled scan. Which feature should an administrator use to improve scan performance on the clients?

  A. Virtual Image exceptions

  B. Centralized Scan exceptions

  C. Download Insight

  D. Tamper Protection

  Correct Answer: A

• Question 28:

  A system running Symantec Endpoint Protection is assigned to a group with client user interface control settings set to mixed mode with Auto-Protect options set to Client. The user on the system is unable to turn off Auto-Protect.

  What is the likely cause of this problem?

  A. Tamper protection is enabled.

  B. System Lockdown is enabled.

  C. Application and Device Control is configured.

  D. The padlock on the enable Auto-Protect option is locked.

  Correct Answer: D

• Question 29:

  Where in the Symantec Endpoint Protection (SEP) management console will a SEP administrator find the option to allow all users to enable and disable the client firewall?

  A. Client User Interface Control Settings

  B. Overview in Firewall Policy

  C. Settings in Intrusion Prevention Policy

  D. System Lockdown in Group Policy

  Correct Answer: A

• Question 30:

  Which tool should an administrator use to discover and deploy the Symantec Endpoint Protection client to new computers?

  A. Unmanaged Detector

  B. Client Deployment Wizard

  C. Communication Update Package Deployment

  D. Symantec Endpoint Discovery Tool

  Correct Answer: B