Symantec EndPoint Protection 12.1 Technical Assessment (ST0-134) Free Practice Test

Question 1

A company receives a high number of reports from users that files being downloaded from internal web servers are blocked. The Symantec Endpoint Protection administrator verifies that the Automatically trust any file downloaded from an intranet website option is enabled. Whichconfiguration can cause Insight to block the files being downloaded from the internal web servers?

A. Local intranet zone is configured incorrectly on the Windows clients browser settings.

B. Virus and Spyware Definitions are out of date.

C. Local intranet zone is configured incorrectly on the Mac clients browser settings.

D. Intrusion Prevention is disabled.

Correct Answer: A

Question 2

A company creates free web access computers for use in public areas, such as airports. The software provided on the computers will be static and the systems must be secure. What should be used to restrict unauthorized applications from running on these computers?

A. custom IPS signatures in an Intrusion Prevention policy

B. client security settings and Tamper Protection

C. blocked devices in an Application and Device Control policy

D. file fingerprint list and System Lockdown

Correct Answer: D

Question 3

Which Symantec Endpoint Protection Management (SEPM) database option is the default for deployments of fewer than 1,000 clients?

A. Embedded Using the Microsoft SQL database that comes with the product

B. On SEPM Installing Microsoft SQL on the same server as the SEPM

C. External to SEPM Using a preexisting Microsoft SQL server in the environment

D. Embedded Using the Sybase SQL Anywhere database that comes with the product

Correct Answer: D

Question 4

An administrator is designing a new single site Symantec Endpoint Protection environment. Due to perimeter firewall bandwidth restrictions, the design needs to minimize the amount of traffic from content passing through the firewall. Which source must the administrator avoid using?

A. Symantec Endpoint Protection Manager

B. LiveUpdate Administrator (LUA)

C. Shared Insight Cache (SIC)

D. Group Update Provider (GUP)

Correct Answer: B

Question 5

By default, the Client User Interface control is set to Server Control. Which two actions will the user who is logged in as a Windows administrator be able to perform? (Select two.)

A. Disable Tamper Protection.

B. Change between Push and Pull mode.

C. Change Virus and Spyware Protection settings.

D. Edit firewall rules below the blue line.

E. Edit the Intrusion Prevention policy.

Correct Answer: A,C

Question 6

What is a characteristic of a Symantec Endpoint Protection (SEP) domain?

A. Domains share the same management server and database.

B. Every administrator from one domain can view data in other domains.

C. Each domain has its own management server and database.

D. Data for each domain is stored in its own separate SEP database.

Correct Answer: A

Question 7

How frequently does Symantec recommend that a Symantec Endpoint Protection Manager site check LiveUpdate for content updates?

A. every hour

B. twice a day

C. every 4 hours

D. once a day

Correct Answer: C

Question 8

Which two Symantec Endpoint Protection components are used to distribute content updates? (Select two.)

A. Symantec Insight Database

B. Symantec Endpoint Protection Manager

C. Shared Insight Cache Server

D. Symantec Protection Center

E. Group Update Provider (GUP)

Correct Answer: B,E

Question 9

A user is downloading a file from https//www.example.com to the local system. The user is able to download and save that file even though it is a known malicious application. Why is the user able to download the application?

A. Download Insight exceptions are disabled.

B. A Trusted Web Domain exception is in place.

C. An Application Control exception for the file is in place.

D. A SONAR exception is in place.

Correct Answer: B

Question 10

Which feature reduces the impact of Auto-Protect on a virtual client guest operating system?

A. Virtual Shared Insight Cache

B. Network Shared Insight Cache

C. Scan Randomization

D. Virtual Image Exception

Correct Answer: D

Question 11

Refer to the exhibit.

What does the symbol to the left of the system name, SEPMGR12, indicate?

A. The system is online.

B. The Symantec Endpoint Protection Manager is running.

C. The Unmanaged Detector is enabled.

D. The firewall is enabled.

Correct Answer: C

Question 12

An administrator wants to ensure that all clients consider the content from the website www.symantec.com as safe. Where can the administrator configure this?

A. Security Settings

B. External Communication Settings

C. Browser Intrusion Prevention excluded domains

D. Exception policy

Correct Answer: D

Question 13

A company is building a new Symantec Endpoint Protection Manager (SEPM) and building email notifications that will go to the security team. Which two notification conditions should the team implement into the SEPM? (Select two.)

A. Risk Outbreak

B. Invalid Host Name

C. Authentication Failure

D. Unknown User

E. Group Update Provider Failure

Correct Answer: A,C

Question 14

In addition to performance improvements, which two benefits does Insight provide? (Select two.)

A. protection against malicious java scripts

B. reputation scoring for documents

C. zero-day threat detection

D. blocking of malicious websites

E. false positive mitigation

Correct Answer: C,E

Welcome to TestSimulate

Symantec EndPoint Protection 12.1 Technical Assessment (ST0-134) Free Practice Test