Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 171:

  Which two Symantec Endpoint Protection components are used to distribute content updates? (Select two.)

  A. Group Update Provider (GUP)

  B. Shared Insight Cache Server

  C. Symantec Protection Center

  D. Symantec Endpoint Protection Manager

  E. Symantec Insight Database

  Correct Answer: AD

• Question 172:

  An administrator is using the SylinkDrop tool to update a Symantec Endpoint Protection client install on a system. The client fails to migrate to the new Symantec Endpoint Protection Manager (SEPM), which is defined correctly in the Sylink.xml file that was exported from the SEPM.? Which settings must be provided with SylinkDrop to ensure the successful migration to a new Symantec Endpoint Protection environment with additional Group Level Security Settings?

  A. -s "silent"

  B. -t "Tamper Protect"

  C. -r "reboot"

  D. -p "password"

  Correct Answer: D

• Question 173:

  Users report abnormal behavior on systems where Symantec Endpoint Protection is installed. Which tool can an administrator run on the problematic systems to identify the likely cause of the abnormal behavior?

  A. smc.exe -stop

  B. SymHelp.exe

  C. PowerShell.exe

  D. CleanWipe.exe

  Correct Answer: B

• Question 174:

  An administrator uses ClientSideClonePrepTool to clone systems and virtual machine deployment. What will the tool do when it is run on each system?

  A. run Microsoft SysPrep and removes all AntiVirus/AntiSpyware definitions

  B. disable Tamper Protect and deploys a Sylink.xml

  C. add a new Extended File Attribute value to all existing files

  D. remove unique Hardware IDs and GUIDs from the system

  Correct Answer: D

• Question 175:

  A Symantec Endpoint Protection Manager (SEPM) administrator notices performance issues with the SEPM server. The Client tab becomes unresponsive in the SEPM console and .DAT files accumulate in the "agentinfo" folder. Which tool should the administrator use to gather log files to submit to Symantec Technical Support?

  A. collectLog.cmd

  B. LogExport.exe

  C. ExportLog.vbs

  D. smc.exe

  Correct Answer: A

• Question 176:

  A company needs to configure an Application and Device Control policy to block read/write access to all USB removable media on its Symantec Endpoint Protection (SEP) systems. Which tool should an administrator use to format the GUID and device IDs as required by SEP?

  A. CheckSum.exe

  B. DeviceTree.exe

  C. TaskMgr.exe

  D. DevViewer.exe

  Correct Answer: D

• Question 177:

  After several failed logon attempts, the Symantec Endpoint Protection Manager (SEPM) has locked the default admin account. An administrator needs to make system changes as soon as possible to address an outbreak, but the admin account is the only account. Which action should the administrator take to correct the problem with minimal impact to the existing environment?

  A. wait 15 minutes and attempt to log on again

  B. restore the SEPM from a backup

  C. run the Management Server and Configuration Wizard to reconfigure the server

  D. reinstall the SEPM

  Correct Answer: A

• Question 178:

  An administrator reports that the Home, Monitors, and Report pages are absent in the Symantec Endpoint Protection Management console when the administrator logs on. Which action should the administrator perform to correct the problem?

  A. configure proxy settings for each server in the site

  B. configure External Logging to Enable Transmission of Logs to a Syslog Server

  C. grant the Administrator Full Access to Root group of the organization

  D. grant View Reports permission to the administrator

  Correct Answer: D

• Question 179:

  Administrators at a company share a single terminal for configuring Symantec Endpoint Protection. The administrators want to ensure that each administrator using the console is forced to authenticate using their individual credentials. They are concerned that administrators may forget to log off the terminal, which would easily allow others to gain access to the Symantec Endpoint Protection Manager (SEPM) console. Which setting should the administrator disable to minimize the risk of non-authorized users logging into the SEPM console?

  A. allow users to save credentials when logging on

  B. delete clients that have not connected for specified time

  C. lock account after the specified number of unsuccessful logon attempts

  D. allow administrators to reset the passwords

  Correct Answer: A

• Question 180:

  A large-scale virus attack is occurring and a notification condition is configured to send an email whenever viruses infect five computers on the network. A Symantec Endpoint Protection administrator has set a one hour damper period for that notification condition. How many notifications does the administrator receive after 30 computers are infected in two hours?

  A. 1

  B. 2

  C. 6

  D. 15

  Correct Answer: B