Symantec Symantec SCS Certification 250-556 Questions & Answers

• Question 31:

  What happens when the ProxySG discovers a match for a rule in policy? (Choose the best answer.)

  A. The ProxySG stops further processing in the layer containing the rule.

  B. The ProxySG continues processing to see whether a further rule might negate the first rule.

  C. It depends on the default policy configured.

  D. The ProxySG stops further processing and executes the rule.

  Correct Answer: A

• Question 32:

  What is the primary benefit of using Integrated Windows Authentication (IWA) authentication realms? (Choose the best answer.)

  A. Single sign-on experience for users

  B. Better performance by using NTLM credentials

  C. Ability to use Kerberos credentials

  D. Greater security than LDAP

  Correct Answer: A

• Question 33:

  What best describes SGOS? (Choose the best answer.)

  A. It is Linux-based

  B. It is a custom-built operating system

  C. It is a Symantec proprietary implementation of Unix

  D. It is Windows-based

  Correct Answer: B

• Question 34:

  Where does the ProxySG get the text of the exception page, when it sends an exception page to a client? (Choose the best answer.)

  A. From the VPM-XML file

  B. From WebPulse

  C. From the exception definition stored on the ProxySG

  D. From Symantec Technical Support

  Correct Answer: C

• Question 35:

  Which two (2) files does the VPM update on the ProxySG when policy created in the VPM is installed? (Choose two.)

  A. Local policy file

  B. Central policy file

  C. VPM-CPL file

  D. Default policy file

  E. VPM-XML file

  Correct Answer: CE

• Question 36:

  Which two (2) items are considered external dependencies? (Choose two.)

  A. Policy

  B. DNS

  C. CPU

  D. Authentication

  E. Memory

  Correct Answer: BD

• Question 37:

  What is a drawback to utilizing apparent data types to detect the file type? (Choose the best answer.)

  A. Does not block "drive-by" malware installation

  B. Less accurate than HTTP content type detection

  C. Presents a security risk

  D. Most resource-intensive

  Correct Answer: D

• Question 38:

  How does a server know where to retrieve the requested information when it receives a GET request method? (Choose the best answer.)

  A. The server examines the certificate of the requesting IP address

  B. The URL is in the GET request

  C. The server retrieves it from the server cache

  D. The server must return a response message requesting the URL

  Correct Answer: B

• Question 39:

  What allows WebPulse to provide real-time revisions to the WebFilter database? (Choose the best answer.)

  A. Dynamic categorization

  B. Creating a local database

  C. Threat risk levels

  D. Configuring application controls

  Correct Answer: A

• Question 40:

  Which is responsible for detecting incoming traffic that matches specific IP addresses or subnets? (Choose the best answer.)

  A. Listeners

  B. Services

  C. TCP tunnels

  D. Proxies

  Correct Answer: A