Symantec Symantec Certified Specialist 250-430 Questions & Answers

• Question 11:

  Which deployment method represents a single point of failure?

  A. None of these answers

  B. Inline XXX

  C. Explicit

  D. Transparent

  Correct Answer: B

  Reference: https://www.symantec.com/content/dam/symantec/docs/white-papers/swg-deploymentmethodologies-en.pdf

• Question 12:

  What is the primary benefit of using IWA authentication realms?

  A. Better performance by using NTLM credentials

  B. Greater security than LDAP

  C. Ability to use Kerberos credentials

  D. Single sign-on experience for users

  Correct Answer: D

  Reference https://origin-symwisedownload.symantec.com/resources/webguides/proxysg/6.5/ authentication_webguide/Content/Topics/Authentication/Concepts/IWA_co.htm

• Question 13:

  Where would you look to find a record of all of configuration changes, as well as which administrator account committed those changes?

  A. Statistics > Advanced

  B. Active sessions

  C. Event log

  D. Access log

  Correct Answer: C

• Question 14:

  Organize these CPL components into descending order based on how they are organized in policy.

  A. Layers, rules, conditions, triggers

  B. Layers, rules, triggers, conditions

  C. Layers, conditions, rules, triggers

  D. Triggers, conditions, rules, layers

  Correct Answer: A

• Question 15:

  What can you use to specify which traffic should be encrypted?

  A. The SSL Proxy

  B. Listeners

  C. All proxy services

  D. Categories

  Correct Answer: A

• Question 16:

  What is typically the biggest load on CPU?

  A. MD5

  B. Emulating certificates

  C. Using RSA

  D. SHA-2

  Correct Answer: C

• Question 17:

  Which one of these statements best describes how the ProxySG locates an object in its cache?

  A. The ProxySG uses the hostname in the object's URL to determine in which cache directory the object is located

  B. The ProxySG uses the first 32 bytes of the object's URL to determine in which cache directory the object is located

  C. The ProxySG performs a hash against the URL of the object and uses the hash as the basis for a lookup into the table of cached objects

  Correct Answer: C

• Question 18:

  Which of the following is NOT a component of a log facility?

  A. Log file

  B. Protocol

  C. Upload schedule

  D. Log format

  Correct Answer: C

  Reference: https://wikileaks.org/spyfiles/files/0/241_BLUECOAT-SGOS_CMG_5.1.4_9.pdf

• Question 19:

  Which one of these statements best describes how policy checkpoints evaluate the installed policy on a ProxySG?

  A. The Server In checkpoint decides which rules will be evaluated by the other checkpoints

  B. The Client In checkpoint decides which rules will be evaluated by the other checkpoints

  C. At each checkpoint, a decision is made whether to allow or deny the transaction

  D. Relevant rules are evaluated at each checkpoint based on the information about the transaction that is available at that point

  Correct Answer: C

• Question 20:

  Where in the VPM can you create a unique instance for each certificate?

  A. SSL Intercept layer

  B. Web Content layer

  C. SSL Access layer

  D. SSL Proxy layer

  Correct Answer: C