Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 121:

  A large oil company has a small exploration department that is remotely located and rarely has internet connectivity. Which client type would allow the exploration department to configure their own security policies?

  A. Mixed-mode client

  B. User-mode client

  C. Managed client

  D. Unmanaged client

  Correct Answer: D

• Question 122:

  A Symantec Endpoint Protection Manager (SEPM) administrator is importing from an Active Directory environment. The administrator needs to know which object types are being imported. Which two object types are imported into the SEPM from Active Directory? (Select two.)

  A. policy

  B. users

  C. computers

  D. services

  E. groups

  Correct Answer: BC

• Question 123:

  An administrator makes a change in the Active Directory structure which has been imported into the Symantec Endpoint Protection Manager (SEPM). By default, when will the change automatically be reflected in the SEPM?

  A. as soon as the change is made in Active Directory

  B. maximum 1 hour

  C. maximum 4 hours

  D. maximum 24 hours

  Correct Answer: D

• Question 124:

  A client is unable to communicate with the Symantec Endpoint Protection Manager (SEPM) Server. The administrator decides to replace the Sylink.xml file on the client using the ylinkDrop tool. Which two additional tasks can be accomplished by replacing the Sylink.xml file? (Select two.)

  A. Convert an unmanaged client to a managed client.

  B. Migrate the SEPM servers to a new domain.

  C. Enable remote troubleshooting for administrators.

  D. Update Symantec Endpoint Protection client to the latest eraser engine.

  E. Migrate or move clients to a new domain or management server.

  Correct Answer: AE

• Question 125:

  A manufacturing company runs three shifts. Employees at the facility must share computers. The administrators need to apply different policies/configurations for each shift. The administrator will need to switch the clients to User mode. Which two additional configuration changes need to be made to allow policies to be applied to each shift? (Select two.)

  A. Create one group for all computers on each shift.

  B. Create one group for all users on each shift.

  C. Turn on inheritance for all groups.

  D. Turn on inheritance for all users.

  E. Turn off inheritance for each user group created.

  F. Turn off inheritance for each computer group created.

  Correct Answer: BE

• Question 126:

  An administrator gets a browser certificate warning when accessing the Symantec Endpoint Protection Manager (SEPM) Web console. Where can the administrator obtain a self-signed certificate to prevent this warning from appearing?

  A. SEPM console Licenses section

  B. Symantec Protection Center

  C. SEPM Web Access

  D. Symantec Support

  Correct Answer: C

• Question 127:

  An administrator installed Symantec Endpoint Protection 12.1 (SEP) in the environment. However, the administrator wants to use secure communication and SSL authentication between clients and the Symantec Endpoint Protection Manager (SEPM). How should the administrator proceed?

  A. Configure and apply certificate in IIS on SEPM.

  B. Configure SSL in the Apache Tomcat Web Server.

  C. Edit http.conf.properties and change the port to 443.

  D. Use public and private key configuration on SEPM 12.1.

  Correct Answer: B

• Question 128:

  Refer to the exhibit.

  

  Inheritance is turned on only for groups England, Sales, Laptops, and Manchester (highlighted). Without turning inheritance off, which top level group must be modified to affect users in the Laptop group?

  A. My Company

  B. England

  C. London

  D. Sales

  Correct Answer: C

• Question 129:

  In Symantec Endpoint Protection 12.1 Enterprise Edition (SEP), what happens when the Soft Enforcement license expires?

  A. LiveUpdate stops.

  B. Proactive Threat Protection is disabled.

  C. SEP clients become unmanaged.

  D. Content updates are allowed.

  Correct Answer: D

• Question 130:

  A company is currently testing Symantec Endpoint Protection 12.1 on 100 clients. The company has decided to deploy SEP to an additional 20,000 clients. They are concerned about the number of clients supported on a single Symantec Endpoint Protection Manager (SEPM). What should the company do to ensure that the SEPM can support the clients?

  A. Configure the clients for Pull mode.

  B. Decrease the heartbeat interval.

  C. Switch to HTTPS for client communications.

  D. Switch to IIS as the web server.

  Correct Answer: A