Symantec Symantec Certifications ST0-250 Questions & Answers

• Question 61:

  When should Connection Classification be enabled?

  A. when Fastpass access is needed to log the connection

  B. when deployed at the edge of the network

  C. when another gateway handles the messages first

  D. when handling mail for multiple internal domains

  Correct Answer: B

• Question 62:

  What must be done before using Spam Quarantine?

  A. Configure address resolution

  B. Configure groups to have a policy to quarantine messages

  C. Configure a partition for use by Spam Quarantine

  D. Configure Spam Scan settings to identify suspected spam

  Correct Answer: B

• Question 63:

  A message released from Spam Quarantine is delivered to the intended recipient. Under the default configuration, where is a copy of the misidentified message also sent?

  A. [email protected]

  B. Symantec Security Response

  C. the email address configured as the administrator for the control center

  D. Symantec's Global Intelligence Network

  Correct Answer: B

• Question 64:

  What two actions can allowed end-users do to submit samples to Symantec and have custom anti-spam rules created? (Select two.)

  A. submit a sample to Symantec using the Email Submission Client

  B. flag messages in their web-based SMG quarantine page as being spam and submitting the results

  C. forward spam samples to [email protected] with a subject of "MISSED SPAM"

  D. move the message into the included "Junk E-mail" folder available in Outlook

  E. submit a sample to Symantec using the Email Submission Client available for Lotus Domino

  Correct Answer: AB

• Question 65:

  How are content filtering policies different from spam and virus policies?

  A. Content filtering policies use system-defined verdicts.

  B. Spam and virus polices use administrator-defined verdicts.

  C. Spam and virus policies use system-defined verdicts.

  D. Content filtering policies use end user-defined verdicts.

  Correct Answer: C

• Question 66:

  The helpdesk consistently receives calls from end-users asking why some attachments are stripped from their outbound email messages. How can the messaging administrator configure the content policy to inform the sender when and why this occurs?

  A. add a notification action to the content filtering policy

  B. enable message quarantine for outbound policy violations

  C. add an action to create an end-user incident

  D. add an action to modify the subject line

  Correct Answer: A

• Question 67:

  Which two actions are valid for a content compliance policy? (Select two.)

  A. Edit the message to delete the offensive content

  B. Add a header to the message

  C. Drop the connection to the offending mail server

  D. Forward the message

  E. Flag the message for further scanning

  Correct Answer: BD

• Question 68:

  An administrator works for a pharmaceutical company that distributes Drug X. A content filtering policy using the premium compliance "Prescription Drug Names" dictionary resource (which includes Drug X as a predefined phrase), blocks any email from the Marketing department containing the drug name. Marketing has indicated that this is unacceptable but wishes to continue to block the use of other words or phrases in that dictionary. How can the administrator adjust the resources used by the current content filtering policy to resolve the Marketing department issue?

  A. Disable Drug X from the "Prescription Drug Names" dictionary

  B. Add Drug X to the "Prescription Drug Names" dictionary

  C. Enable Drug X in the "Prescription Drug Names" dictionary

  D. Delete Drug X from the "Prescription Drug Names" dictionary

  Correct Answer: A

• Question 69:

  Outgoing messages need to be checked for specific words and phrases. Any messages containing the listed words should be held for review. Which content filtering resource is used for this requirement?

  A. Directories

  B. Dictionaries

  C. Notifications

  D. Annotations

  Correct Answer: D

• Question 70:

  What happens to a message after it has been identified as a suspect virus and placed into the suspect virus quarantine?

  A. It is automatically deleted after 7 days.

  B. It is rescanned when the configured hold time has elapsed.

  C. It is stored in the Central Quarantine Server.

  D. It is forwarded to Symantec Security Response.

  Correct Answer: B