Symantec Symantec Certified Specialist 250-430 Questions & Answers

• Question 51:

  When does the ProxySG establish an Schannel?

  A. When a client request is first received

  B. When the client sends an NTLM type 2 message to ProxySG

  C. When IWA authentication fails

  D. When the client sends an NTLM type 3 message to the ProxySG

  Correct Answer: B

• Question 52:

  Which of the following is not a VPM trigger object?

  A. Time

  B. Source

  C. Destination

  D. Service

  E. Action

  Correct Answer: E

• Question 53:

  Name three methods by which client configuration can be performed in an explicit ProxySG deployment. (Choose three.)

  A. Configure the user agent to point to the IP address or hostname of the ProxySG

  B. Configure the user agent to point to the location of a PAC file

  C. Configure the user agent to use WPAD

  D. Use Symantec Management Center to configure the user agent

  E. Configure forwarding hosts on the ProxySG

  Correct Answer: ABC

• Question 54:

  If you have configured continuous uploading of access logs and the ProxySG is unable to reach the upload destination, what happens to the log entries?

  A. They are uploaded in real time to the backup upload destination configured in the Management Console

  B. None of these answers

  C. They are stored locally until the connection is re-established, and then they are uploaded

  D. They are discarded

  Correct Answer: C

• Question 55:

  Which services are included in the Intelligence Services Advanced Bundle?

  A. Content categories

  B. Threat risk levels

  C. All of these

  D. Geolocation

  Correct Answer: C

  Reference: https://www.symantec.com/products/webfilter-intelligent-services

• Question 56:

  Where is the WebFilter database stored? (Choose two.)

  A. On clients' mobile devices

  B. On a properly licensed ProxySG

  C. At several data centers around the world

  D. At third-party data centers

  Correct Answer: BC

• Question 57:

  What does the authentication mode specify?

  A. The time-to-live for credentials

  B. The protocol used to communicate with the authentication service

  C. The challenge type and the accepted surrogate

  D. Whether the credentials will be encrypted

  Correct Answer: B

• Question 58:

  Why is Kerberos performance better than NTLM?

  A. It uses less encryption

  B. None of these answers

  C. Only two round trips are required between the browser and an authentication server

  D. It works with later versions of Microsoft Windows

  Correct Answer: B

  Reference: https://origin-symwisedownload.symantec.com/resources/webguides/proxysg/certification/

  authentication_webguide/Content/Topics/Authentication/Concepts/IWA_auth_protocols_co.htm

• Question 59:

  When the ProxySG uses a virtual URL for user authentication, what must the virtual URL point to?

  A. The IP address of the origin content server

  B. A hostname that the user agent can DNS-resolve to an IP address

  C. None of these answers

  D. The IP address of the ProxySG

  Correct Answer: D

  Reference: https://support.symantec.com/en_US/article.TECH243088.html

• Question 60:

  Which Symantec product is best suited for simultaneously administering a large number of ProxySG appliances?

  A. Reporter

  B. PacketShaper

  C. Content Analysis

  D. Management Center

  Correct Answer: A