Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 271:

  Which two items are stored in the Symantec Endpoint Protection database? (Select two.)

  A. Device Hardware IDs

  B. User Defined Scans

  C. Symantec Endpoint Protection Client for Linux

  D. Symantec Endpoint Protection Client for Macintosh

  E. Active Directory Synced Logon Credentials

  Correct Answer: AD

• Question 272:

  Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?

  A. verify that dbsrv11.exe is listening on port 2638

  B. check whether the MSSQLSERVER service is running

  C. verify the sqlserver.exe service is running on port 1433

  D. check the database transaction logs in X\Program Files\Microsoft SQL server

  Correct Answer: A

• Question 273:

  What is the file scan workflow order when Shared Insight Cache and reputation are enabled?

  A. Symantec Insight > Shared Insight Cache server > local client Insight cache

  B. local client Insight cache > Shared Insight Cache server > Symantec Insight

  C. Shared Insight Cache server > local client Insight cache > Symantec Insight

  D. local client Insight cache > Symantec Insight > Shared Insight Cache server

  Correct Answer: B

• Question 274:

  What is a function of Symantec Insight?

  A. provides reputation ratings for structured data

  B. enhances the capability of Group Update Providers (GUP)

  C. increases the efficiency and effectiveness of LiveUpdate

  D. provides reputation ratings for binary executables

  Correct Answer: D

• Question 275:

  Which Symantec Endpoint Protection component enables access to data through ad-hoc reports and charts with pivot tables?

  A. Symantec Protection Center

  B. Shared Insight Cache Server

  C. Symantec Endpoint Protection Manager

  D. IT Analytics

  Correct Answer: D

• Question 276:

  Which Symantec Endpoint Protection technology blocks a downloaded program from installing browser plugins?

  A. Intrusion Prevention

  B. SONAR

  C. Application and Device Control

  D. Tamper Protection

  Correct Answer: C

• Question 277:

  Which protection engine should be enabled to drop malicious vulnerability scans against a client system?

  A. SONAR

  B. Intrusion Prevention

  C. Tamper Protection

  D. Application and Device Control

  Correct Answer: B

• Question 278:

  Which protection technology can detect botnet command and control traffic generated on the Symantec Endpoint Protection client machine?

  A. Insight

  B. SONAR

  C. Risk Tracer

  D. Intrusion Prevention

  Correct Answer: D

• Question 279:

  Which technology can prevent an unknown executable from being downloaded through a browser session?

  A. Browser Intrusion Prevention

  B. Download Insight

  C. Application Control

  D. SONAR

  Correct Answer: B

• Question 280:

  Which Symantec Endpoint Protection defense mechanism provides protection against threats that propagate from system to system through the use of autorun.inf files?

  A. Application and Device Control

  B. SONAR

  C. TruScan

  D. Host Integrity

  Correct Answer: A