Symantec Symantec Certified Security program ST0-134 Questions & Answers

• Question 21:

  Which Symantec Endpoint Protection Manager feature allows an administrator to view and modify commonly accessed reports?

  A. Favorite Reports Display list on the Monitors page

  B. Scheduled Reports in the Reports section

  C. Favorite Reports Display list on the Home page

  D. Summary Dropdown in the Monitors section

  Correct Answer: C

• Question 22:

  Which two options can administrators customize on the Home page? (Select two.)

  A. Auto-refresh rate

  B. Number of report

  C. Favorite Reports

  D. Common Tasks

  E. Types of endpoints listed

  Correct Answer: AC

• Question 23:

  Refer to the exhibit.

  

  An administrator has configured the Symantec Endpoint Protection Manager (SEPM) to use Active Directory authentication. The administrator defines a new Symantec Endpoint Protection administrator named Sep_SysAdmin, configured to use Directory Authentication. Which password needs to be entered when the administrator logs in to the SEPM console as Sep_SysAdmin?

  A. the password for the Active Directory user that was mapped with Sep_SysAdmin

  B. the password for the user named Sep_SysAdmin that was created in SEPM

  C. the password for the user named Sep_SysAdmin that was created in Active Directory

  D. the password for the Administrator account in Active Directory

  Correct Answer: A

• Question 24:

  An administrator needs to check when and by which account a policy was modified. Which log query should the administrator use?

  A. Compliance

  B. Audit

  C. Access

  D. System

  Correct Answer: B

• Question 25:

  Which notification action can be performed when a security-related condition is met?

  A. Send an SNMP trap.

  B. Alert with a GUI popup on the admin console.

  C. Run a batch file or another executable file.

  D. Send an alert to a client.

  Correct Answer: C

• Question 26:

  A company is building a new Symantec Endpoint Protection Manager (SEPM) and building email notifications that will go to the security team. Which two notification conditions should the team implement into the SEPM? (Select two.)

  A. Unknown User

  B. Invalid Host Name

  C. Risk Outbreak

  D. Group Update Provider Failure

  E. Authentication Failure

  Correct Answer: CE

• Question 27:

  An administrator needs to determine which versions of Symantec Endpoint Protection (SEP) are currently in the network. Which report provides this information?

  A. Client Inventory report

  B. Deployment report

  C. SEP Product Versions report

  D. Audit Inventory report

  Correct Answer: C

• Question 28:

  How can an administrator proactively obtain information about unknown devices on a network?

  A. Use the Client Deployment Wizard feature to locate unmanaged endpoints.

  B. Create an Unmanaged Computer notification.

  C. Schedule an audit report to send to the administrator.

  D. Run the Symantec Endpoint Discovery Tool.

  Correct Answer: B

• Question 29:

  An administrator is restoring a Microsoft SQL Symantec Endpoint Protection 12.1 database and installing a new Symantec Endpoint Protection Manager (SEPM). After completing the restore, the administrator notices that the clients are unable to connect to the SEPM. Which step did the administrator forget when performing the restore?

  A. restoring the client certificate

  B. restoring the server certificate

  C. importing the previously backed up data

  D. setting the SQL client folder

  Correct Answer: B

• Question 30:

  An administrator has installed Symantec Endpoint Protection 12.1 using an embedded database. Which two database maintenance tasks are available in the Symantec Endpoint Protection Manager console? (Select two.)

  A. truncating database transaction logs

  B. limiting the client installation log entries

  C. rebuilding of database indexes

  D. deleting clients who have not connected recently from the console

  E. limiting the number of backups to keep

  Correct Answer: AC