Symantec Symantec Certifications ST0-250 Questions & Answers

• Question 51:

  An employee reports that a message sent to a customer was rejected. The employee provides sufficient information for the administrator to find the message using the Message Audit log. The employee wants to know why that message was blocked. Which section of the Message Audit Log detail page would provide this information?

  A. Verdict(s)

  B. Action(s)

  C. IP Blocklist Lookup Tool

  D. Block Reason

  Correct Answer: A

• Question 52:

  How could an administrator improve Control Center performance of Symantec Messaging Gateway 10.5?

  A. increase the log rotation frequency

  B. increase the number of service threads

  C. reduce the amount of reporting data

  D. restrict user access to the spam quarantine

  Correct Answer: C

• Question 53:

  What should an administrator do before performing a software update of Symantec Messaging Gateway 10.5?

  A. Store backup on local server

  B. Store backup on a remote location using FTP

  C. Encrypt local backup

  D. Purge all backups from the appliance

  Correct Answer: C

• Question 54:

  Which command line interface (CLI) command displays the update.log to check the progress of a software update of Symantec Messaging Gateway 10.5?

  A. tail

  B. watchlog

  C. update.pl

  D. version -l

  Correct Answer: A

• Question 55:

  Before performing a software update on a scanner-only appliance, which MTA operation/mode should be chosen if there are messages in the queues?

  A. Pause the MTA

  B. Flush all delivery queues

  C. Pause message scanning and delivery

  D. Do not accept incoming messages

  Correct Answer: D

• Question 56:

  When enabling Connection Classification, how many messages must be processed in learning mode before messages can be deferred?

  A. 5,000

  B. 10,000

  C. 20,000

  D. 50,000

  Correct Answer: D

• Question 57:

  A diagnostics package for a scanner-only appliance can be generated from the GUI in Symantec Messaging Gateway 10.5. If the package is small (less than 5 MB), which transfer protocol type should be used by the administrator to verify the diagnostics package before providing it to technical support for analysis?

  A. SMTP

  B. Download to desktop

  C. FTP

  D. SCP

  Correct Answer: B

• Question 58:

  When should Connection Classification be enabled?

  A. when Fastpass access is needed to log the connection

  B. when deployed at the edge of the network

  C. when another gateway handles the messages first

  D. when handling mail for multiple internal domains

  Correct Answer: C

• Question 59:

  What happens to an IP listed in the Fastpass exclusions?

  A. The IP will not be processed for spam,but will still be scanned for malware.

  B. The IP will be excluded from spam scanning.

  C. The IP will never get a Fastpass.

  D. The IP will be excluded from compliance scanning.

  Correct Answer: C

• Question 60:

  What are two benefits of customer-specific spam rules? (Select two.)

  A. provides a wizard style tool enabling administrators to create rules against spam

  B. provides a mechanism to quickly block local or targeted attacks

  C. enables the administrator to report spammers to Symantec Global Intelligence Network

  D. adds the IP of selected spammers to the lowest bucket in the Connection Throttling module

  E. provide fast protection against messages Symantec may not define as spam

  Correct Answer: BE