The appropriate selection of training is a guarantee of success. However, the choice is very important, ITCertKing popularity is well known, there is no reason not to choose it. Of course, Give you the the perfect training materials, if you do not fit this information that is still not effective. So before using ITCertKing training materials, you can download some free questions and answers as a trial, so that you can do the most authentic exam preparation. This is why thousands of candidates depends ITCertKing one of the important reason. We provide the best and most affordable, most complete exam training materials to help them pass the exam.
ITCertKing can provide you a pertinence training and high quality exercises, which is your best preparation for your first time to attend Symantec certification 250-315 exam. ITCertKing's exercises are very similar with the real exam, which can ensure you a successful passing the Symantec certification 250-315 exam. If you fail the exam, we will give you a full refund.
Exam Code: 250-315
Exam Name: Symantec (Administration of Symantec Endpoint Protection 12.1)
One year free update, No help, Full refund!
Total Q&A: 167 Questions and Answers
Last Update: 2014-01-20
ITCertKing's products can not only help customers 100% pass their first time to attend Symantec certification 250-315 exam, but also provide a one-year of free online update service for them, which will delivery the latest exam materials to customers at the first time to let them know the latest certification exam information. So ITCertKing is a very good website which not only provide good quality products, but also a good after-sales service.
The ITCertKing Symantec 250-315 exam questions is 100% verified and tested. ITCertKing Symantec 250-315 exam practice questions and answers is the practice test software. In ITCertKing, you will find the best exam preparation material. The material including practice questions and answers. The information we have could give you the opportunity to practice issues, and ultimately achieve your goal that through Symantec 250-315 exam certification.
With ITCertKing's help, you do not need to spend a lot of money to participate in related cram or spend a lot of time and effort to review the relevant knowledge, but can easily pass the exam. Simulation test software of Symantec 250-315 exam is developed by ITCertKing's research of previous real exams. ITCertKing's Symantec 250-315 exam practice questions have a lot of similarities with the real exam practice questions.
Take advantage of the ITCertKing's Symantec training materials to prepare for the exam, let me feel that the exam have never so easy to pass. This is someone who passed the examination said to us. With ITCertKing Symantec 250-315 exam certification training, you can sort out your messy thoughts, and no longer twitchy for the exam. ITCertKing have some questions and answers provided free of charge as a trial. If I just said, you may be not believe that. But as long as you use the trial version, you will believe what I say. You will know the effect of this exam materials.
250-315 Free Demo Download: http://www.itcertking.com/250-315_exam.html
NO.1 How many Symantec Endpoint Protection Managers can be connected to an embedded database?
A. 1
B. 2
C. 5
D. 10
Answer: A
Symantec 250-315 original questions 250-315 250-315 250-315 pdf
NO.2 Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like
W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files?
A. Application Control
B. SONAR
C. Client Firewall
D. Exceptions
Answer: A
Symantec pdf 250-315 250-315 250-315
NO.3 Which Symantec Endpoint Protection 12.1 component improves performance because known good
files are skipped?
A. LiveUpdate Administrator server
B. Group Update Provider
C. Shared Insight Cache server
D. Central Quarantine server
Answer: C
Symantec 250-315 250-315 250-315 certification
NO.4 Which Symantec Endpoint Protection 12.1 component provides services to improve the performance
of virtual client scanning?
A. Shared Insight Cache server
B. LiveUpdate Administrator server
C. Symantec Protection Center
D. Group Update Provider
Answer: A
Symantec original questions 250-315 exam dumps 250-315 exam prep 250-315 questions 250-315
NO.5 Which component is required in order to run Symantec Endpoint Protection 12.1 protection
technologies?
A. Symantec Endpoint Protection Manager
B. Symantec Endpoint Protection client
C. LiveUpdate Administrator server
D. Symantec Protection Center
Answer: B
Symantec 250-315 study guide 250-315 250-315 250-315 exam prep
NO.6 A financial company has a security policy that prevents banking system workstations from connecting to
the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from
working on the company's workstations?
A. Insight
B. Application and Device Control
C. Network Threat Protection
D. LiveUpdate
Answer: A
Symantec 250-315 practice test 250-315 answers real questions 250-315 test answers 250-315 250-315 questions
NO.7 Which two objects in the Symantec Endpoint Protection Manager console describe the most granular
level to which a policy can be applied? (Select two.)
A. Site
B. Domain
C. Group
D. Location
E. Computer
F. User
Answer: C,D
Symantec test questions 250-315 questions 250-315 study guide
NO.8 An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a
system named SEPM01. The groups and policies that were previously in the SEPM01 console are
unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for
this change?
A. The administrator was modified from using Computer mode to User mode.
B. The administrator was logged in to the incorrect domain for SEPM01.
C. The administrator was changed from a limited administrator to a system administrator.
D. The administrator was using the Web console instead of the Java console.
Answer: B
Symantec 250-315 250-315 250-315 braindump
NO.9 Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec
Endpoint Protection Manager and other products, along with cross-product reporting?
A. Symantec Reporting server
B. Symantec Security Information Manager
C. IT Analytics
D. Symantec Protection Center
Answer: D
Symantec questions 250-315 250-315 study guide 250-315
NO.10 According to Symantec, what is a botnet.?
A. systems infected with the same virus strain
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. compromised systems opening communication to an IRC channel
Answer: B
Symantec demo 250-315 questions 250-315 original questions
NO.11 Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?
A. Shared Insight Cache server
B. Symantec Endpoint Protection client
C. Symantec Endpoint Protection Manager
D. LiveUpdate Administrator server
Answer: B
Symantec 250-315 250-315 250-315 test questions
NO.12 In addition to performance improvements, which two benefits does Insight provide? (Select two.)
A. reputation scoring for documents
B. zero-day threat detection
C. protection against system file modifications
D. false positive mitigation
E. blocking of malicious websites
Answer: B,D
Symantec exam 250-315 answers real questions 250-315 250-315 250-315 250-315 pdf
NO.13 Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers
against zero-day network attacks?
A. SONAR
B. Client Firewall
C. Intrusion Prevention
D. System Lockdown
Answer: C
Symantec 250-315 original questions 250-315
NO.14 Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere?
A. Symantec Endpoint Protection Manager embedded database
B. Symantec Endpoint Protection Manager remote database
C. LiveUpdate Administrator server
D. Shared Insight Cache server
Answer: A
Symantec test answers 250-315 braindump 250-315 original questions 250-315
NO.15 How does the Intrusion Prevention System add an additional layer of protection to Network Threat
Protection?
A. It inspects the TCP packet headers and tracks the sequence number.
B. It performs deep packet inspection, reading the packet headers, and data portion.
C. It examines TCP/IP traffic from the application and traces the source of the traffic.
D. It monitors IP datagrams for abnormalities.
Answer: B
Symantec braindump 250-315 pdf 250-315 250-315
NO.16 How can an administrator manage multiple, independent companies from one database while
maintaining independent groups, computers, and policies?
A. Set up limited administrators with appropriate rights.
B. Set up separate domains.
C. Set up additional sites using a single database.
D. Set up separate locations and turn off inheritance.
Answer: B
Symantec certification training 250-315 250-315 250-315 pdf
NO.17 A company with one site has a factory with computers in the manufacturing area. Both factory
managers and operators need to log in to these shared computers. Different policies will be applied
depending on whether the individual logging in to the machine is a manager or an operator. Which
Symantec Endpoint Protection 12.1 feature provides this ability?
A. Computer mode
B. Active Directory synchronization
C. User mode
D. Console authentication
Answer: C
Symantec 250-315 exam simulations 250-315 pdf 250-315 certification 250-315
NO.18 Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass
traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks
such obfuscated attacks?
A. SONAR
B. Bloodhound heuristic virus detection
C. Client Firewall
D. Browser Intrusion Prevention
Answer: D
Symantec certification training 250-315 250-315 250-315 exam simulations 250-315 250-315 braindump
NO.19 A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection
12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention
technologies. Why would Intrusion Prevention be unable to block all communications from an attacking
host?
A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host.
B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it.
C. Intrusion Prevention definitions are out-of-date.
D. Intrusion Prevention is set to log only.
Answer: A
Symantec 250-315 study guide 250-315 250-315 test answers
NO.20 The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant.
Which SONAR sub-feature can block new variants of the same family, based on sequence of events?
A. artificial intelligence
B. behavioral heuristic
C. human authored signatures
D. behavioral policy lockdown
Answer: C
Symantec study guide 250-315 exam simulations 250-315 250-315 dumps 250-315
ITCertKing offer the latest ST0-237 exam material and high-quality E20-554 pdf questions & answers. Our HP0-J64 VCE testing engine and 000-657 study guide can help you pass the real exam. High-quality 700-101 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.
Article Link: http://www.itcertking.com/250-315_exam.html
没有评论:
发表评论