Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 161:

  Why does Power Eraser need Internet access?

  A. to leverage Symantec Insight

  B. to validate root certificates on all portable executables (PXE) files

  C. to ensure the Power Eraser tool is the latest release

  D. to look up CVE vulnerabilities

  Correct Answer: A

• Question 162:

  Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers against zero-day network attacks?

  A. SONAR

  B. Client Firewall

  C. Intrusion Prevention

  D. System Lockdown

  Correct Answer: C

• Question 163:

  According to Symantec, what is a botnet?

  A. systems infected with the same virus strain

  B. groups of systems performing remote tasks without the users' knowledge

  C. groups of computers configured to steal credit card records

  D. compromised systems opening communication to an IRC channel

  Correct Answer: B

• Question 164:

  Which setting can an administrator change that will result in the greatest impact on the speed of delivery of Symantec Endpoint Protection policy changes to the endpoints?

  A. Download randomization

  B. Heartbeat interval

  C. LiveUpdate scheduling frequency

  D. Reconnection preferences

  Correct Answer: D

• Question 165:

  What is a supported migration path for Symantec Endpoint Protection?

  A. Symantec Endpoint Protection Enterprise Edition 12.1 > Symantec Endpoint Protection Small Business Edition 12.1

  B. Symantec Endpoint Protection Small Business Edition 12.1 > Symantec Endpoint Protection Enterprise Edition 12.1

  C. Symantec Endpoint Protection 12.1 Enterprise Edition > Symantec Endpoint Protection 11.x Enterprise Edition

  D. Symantec Endpoint Protection Small Business Edition 12.1 > Symantec Endpoint Protection 11.x Small Business Edition

  Correct Answer: D

• Question 166:

  Employees of an accounting company often take their notebooks to customer sites. The administrator needs to apply a different firewall policy when the notebooks are disconnected from the accounting company's network. What must the administrator configure to use the two different policies?

  A. Groups

  B. Domains

  C. Sites

  D. Locations

  Correct Answer: B

• Question 167:

  A Symantec Endpoint Protection administrator needs to comply with a service level agreement stipulating that all definitions must be internally quality assurance tested before being deployed to customers. Which step should the administrator take?

  A. install a LiveUpdate Administrator Server

  B. install a Shared Insight Cache Server

  C. install a Group Update Provider (GUP) to the existing site

  D. install a Symantec Protection Center

  Correct Answer: D

• Question 168:

  A company needs to forward log data from Data Center A to Data Center B during off peak hours only. How should the company architect its Symantec Endpoint Protection environment?

  A. set up two sites and schedule replication between them during off peak hours

  B. set up a single site and configure the clients to send their logs to the Manager during off peak hours

  C. set up a Group Update Provider (GUP) at Data Center A and configure it to send logs during off peak hours

  D. set up a LiveUpdate Server at Data Center A and configure it to send logs during off peak hours

  Correct Answer: D

• Question 169:

  What is a valid Symantec Endpoint Protection (SEP) single site design?

  A. multiple MySQL databases

  B. one Microsoft SQL Server database

  C. one Microsoft SQL Express database

  D. multiple embedded databases

  Correct Answer: A

• Question 170:

  Which tool should the administrator run before starting the Symantec Endpoint Protection Manager upgrade as a Symantec Best Practice?

  A. collectLog.cmd

  B. DBValidator.bat

  C. LogExport.cmd

  D. Upgrade.exe

  Correct Answer: B