Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 231:

  Which policy should an administrator modify to enable Virtual Image Exception (VIE) functionality?

  A. Host Integrity Policy

  B. Virus and Spyware Protection Policy

  C. Exceptions Policy

  D. Application and Device Control Policy

  Correct Answer: B

• Question 232:

  Multiple Windows virtual clients running on an ESX server need to be scanned daily by a scheduled scan. Which feature should an administrator use to improve scan performance on the clients?

  A. Virtual Image exceptions

  B. Centralized Scan exceptions

  C. Download Insight

  D. Tamper Protection

  Correct Answer: A

• Question 233:

  The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM). How many content revisions must the SEPM keep to ensure clients that check in to the SEPM every 10 days receive xdelta content packages instead of full content packages?

  A. 10

  B. 20

  C. 30

  D. 60

  Correct Answer: C

• Question 234:

  Which feature reduces the impact of Auto-Protect on a virtual client guest operating system?

  A. Network Shared Insight Cache

  B. Virtual Image Exception

  C. Scan Randomization

  D. Virtual Shared Insight Cache

  Correct Answer: B

• Question 235:

  Which action does the Shared Insight Cache (SIC) server take when the whitelist reaches maximum capacity?

  A. The SIC server allocates additional memory for the whitelist as needed.

  B. The SIC server will start writing the cache to disk.

  C. The SIC server will remove the least recently used items based on the prune size.

  D. The SIC server will remove items with the fewest number of votes.

  Correct Answer: C

• Question 236:

  A system running Symantec Endpoint Protection is assigned to a group with client user interface control settings set to mixed mode with Auto-Protect options set to Client. The user on the system is unable to turn off Auto-Protect. What is the likely cause of this problem?

  A. Tamper protection is enabled.

  B. System Lockdown is enabled.

  C. Application and Device Control is configured.

  D. The padlock on the enable Auto-Protect option is locked.

  Correct Answer: D

• Question 237:

  A Symantec Endpoint Protection (SEP) client uses a management server list with three management servers in the priority 1 list. Which mechanism does the SEP client use to select an alternate management server if the currently selected management server is unavailable?

  A. The client chooses another server in the list randomly.

  B. The client chooses a server based on the lowest server load.

  C. The client chooses a server with the next highest IP address.

  D. The client chooses the next server alphabetically by server name.

  Correct Answer: A

• Question 238:

  A company has 10,000 Symantec Endpoint Protection (SEP) clients deployed using two Symantec Endpoint Protection Managers (SEPMs). Which configuration is recommended to ensure that each SEPM is able to effectively handle the communications load with the SEP clients?

  A. Push mode

  B. Client control mode

  C. Server control mode

  D. Pull mode

  Correct Answer: D

• Question 239:

  Where in the Symantec Endpoint Protection (SEP) management console will a SEP administrator find the option to allow all users to enable and disable the client firewall?

  A. Client User Interface Control Settings

  B. Overview in Firewall Policy

  C. Settings in Intrusion Prevention Polic

  D. System Lockdown in Group Policy

  Correct Answer: A

• Question 240:

  A company deploys Symantec Endpoint Protection (SEP) to 50 virtual machines running on a single ESXi host. Which configuration change can the administrator make to minimize sudden IOPS impact on the ESXi server while each SEP endpoint communicates with the Symantec Endpoint Protection Manager?

  A. increase Download Insight sensitivity level

  B. reduce the heartbeat interval

  C. increase download randomization window

  D. reduce number of content revisions to keep

  Correct Answer: C