Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 221:

  A company receives a high number of reports from users that files being downloaded from internal web servers are blocked. The Symantec Endpoint Protection administrator verifies that the Automatically trust any file downloaded from an intranet website option is enabled. Which configuration can cause Insight to block the files being downloaded from the internal web servers?

  A. Intrusion Prevention is disabled.

  B. Local intranet zone is configured incorrectly on the Windows clients browser settings.

  C. Local intranet zone is configured incorrectly on the Mac clients browser settings.

  D. Virus and Spyware Definitions are out of date.

  Correct Answer: B

• Question 222:

  An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear. What is the likely problem?

  A. The Learn applications that run on the client computers setting is disabled.

  B. The client computers already have exclusions for the applications.

  C. The Symantec Endpoint Protection Manager is installed on a Domain Controller.

  D. The clients are in a trusted Symantec Endpoint Protection domain.

  Correct Answer: A

• Question 223:

  A company uses a remote administration tool that is detected and quarantined by Symantec Endpoint Protection (SEP). Which step can an administrator perform to continue using the remote administration tool without detection by SEP?

  A. create a Tamper Protect exception for the tool

  B. create an Application to Monitor exception for the tool

  C. create a Known Risk exception for the tool

  D. create a SONAR exception for the tool

  Correct Answer: C

• Question 224:

  An exception needs to be created for a file named "RunMe.exe" in a user's Windows 7 "My Documents" folder. The user's login name is Bob. Which method should be used?

  A. create a file exception for "RunMe.exe" with a Prefix Variable of [USERNAME]

  B. create a file exception for "[Drive]\Users\Bob\My Documents\RunMe.exe"

  C. create a file exception for "*\RunMe.exe"

  D. create a file exception for "RunMe.exe" with a Prefix Variable of %USERPROFILE%

  Correct Answer: B

• Question 225:

  Which exception type can be configured?

  A. Parent Process

  B. Browser Object

  C. MAC Address

  D. Trusted Web Domain

  Correct Answer: D

• Question 226:

  A company has a small number of systems in their Symantec Endpoint Protection Manager (SEPM) group with federal mandates that AntiVirus definitions undergo a two week testing period. After being loaded on the client, the tested virus definitions must remain unchanged on the client systems until the next set of virus definitions have completed testing. All other clients must remain operational on the most recent definition sets. An internal LiveUpdate Server has been considered as too expensive to be a solution for this company. What should be modified on the SEPM to meet this mandate?

  A. The LiveUpdate Settings policy for this group should be modified to use an Explicit Group Update Provider.

  B. The LiveUpdate Content policy for this group should be modified to use a specific definition revision.

  C. The SEPM site LiveUpdate settings should be modified so the Number of content revisions to keep is set to 1.

  D. The SEPM site LiveUpdate settings should be modified so the Number of content revisions to keep is set to 14.

  Correct Answer: B

• Question 227:

  Which ports on the company firewall must an administrator open to avoid problems when connecting to Symantec Public LiveUpdate servers?

  A. 25, 80, and 2967

  B. 2967, 8014, and 8443

  C. 21, 443, and 2967

  D. 21, 80, and 443

  Correct Answer: D

• Question 228:

  Which setting can an administrator configure in the LiveUpdate Policy?

  A. specific content revision to download from a Group Update Provider (GUP)

  B. specific content policies to download

  C. Linux Settings

  D. frequency to download content

  Correct Answer: D

• Question 229:

  Which two sources can a Macintosh client use to download content? (Select two.)

  A. Symantec Endpoint Protection Manager

  B. Group Update Provider (GUP)

  C. Internal LiveUpdate server

  D. Default Management server

  E. Symantec LiveUpdate server

  Correct Answer: CE

• Question 230:

  Which client log shows that a client is downloading content from its designated source?

  A. Risk Log

  B. System Log

  C. SesmLu.log

  D. Log.LiveUpdate

  Correct Answer: B