Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 181:

  Which action can an administrator take to improve the Symantec Endpoint Protection Manager (SEPM) dashboard performance and report accuracy?

  A. decreasing the number of content revisions to keep

  B. lowering the client installation log entries

  C. rebuilding database indexes

  D. limiting the number of backups to keep

  Correct Answer: C

• Question 182:

  The Security Status on the console home page is failing to alert a Symantec Endpoint Protection (SEP) administrator when virus definitions are out of date. How should the SEP administrator enable the Security Status alert?

  A. lower the Security Status thresholds

  B. raise the Security Status thresholds

  C. change the Notifications setting to "Show all notifications"

  D. change the Action Summary display to "By number of computers"

  Correct Answer: A

• Question 183:

  Catastrophic hardware failure has occurred on a single Symantec Endpoint Protection Manager (SEPM) in an environment with two SEPMs. What is the quickest way an administrator can restore the environment to its original state?

  A. build a new site and configure replication with the still functioning SEPM

  B. install a new SEPM into the existing site

  C. clone the still functioning SEPM and change the server.properties file

  D. reinstall the entire SEPM environment

  Correct Answer: B

• Question 184:

  An administrator is recovering from a Symantec Endpoint Manager (SEPM) site failure. Which file should the administrator use during an install of SEPM to recover the lost environment according to Symantec Disaster Recovery Best Practice documentation?

  A. original installation log

  B. recovery_timestamp file

  C. settings.properties file

  D. Sylink.xml file from the SEPM

  Correct Answer: B

• Question 185:

  Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)

  A. Application Learning can generate increased false positives.

  B. Application Learning should be deployed on a small group of systems in the enterprise.

  C. Application Learning can generate significant CPU or memory use on a Symantec Endpoint Protection Manager.

  D. Application Learning requires a file fingerprint list to be created in advance.

  E. Application Learning is dependent on Insight.

  Correct Answer: BC

• Question 186:

  A Symantec Endpoint Protection (SEP) administrator performed a disaster recovery without a database backup. In which file should the SEP administrator add "scm.agent.groupcreation=true" to enable the automatic creation of client groups?

  A. settings.conf

  B. conf.properties

  C. catalina.out

  D. httpd.conf

  Correct Answer: B

• Question 187:

  Which task is unavailable for administrative accounts that authenticate using RSA SecurID Authentication?

  A. reset forgotten passwords

  B. import organizational units (OU) from Active Directory

  C. configure external logging

  D. enable Session Based Authentication with Web Services

  Correct Answer: A

• Question 188:

  An administrator is troubleshooting a Symantec Endpoint Protection (SEP) replication. Which component log should the administrator check to determine whether the communication between the two sites is working correctly?

  A. Apache Web Server

  B. Tomcat

  C. SQL Server

  D. Group Update Provider (GUP)

  Correct Answer: B

• Question 189:

  An administrator is re-adding an existing Replication Partner to the local Symantec Endpoint Protection Manager site. Which two parameters are required to re-establish this replication partnership? (Select two.)

  A. remote server IP Address and port

  B. remote site Encryption Password

  C. remote site Domain ID

  D. remote server Administrator credentials

  E. remote SQL database account credentials

  Correct Answer: AD

• Question 190:

  When can an administrator add a new replication partner?

  A. immediately following the first LiveUpdate session of the new site

  B. during a Symantec Endpoint Protection Manager upgrade

  C. during the initial install of the new site

  D. immediately following a successful Active Directory sync

  Correct Answer: C