Slide 1: Killtest is the best choice for all your IT exam preparation. Before you buy these exams from us, we can offer you some free demos of each products. You can check out the interface, question quality and usability of our practice exams before you decide to buy. The followings are some latest and hottest exams in Killtest now, such as the VCP-510 exam, SY0-301 exam, EX0-115 exam, HP2-H18 exam, 250-310 exam, 000-581 exam and so on. Welcome to Killtest.com now, then get more benefits from there.
Slide 2: The safer , easier way to help you pass any IT exams.
Exam
: ST0-134
Title
: Symantec EndPoint Protection 12.1 Tcehnical Assessment
Version : DEMO
1/5
Slide 3: The safer , easier way to help you pass any IT exams.
1.Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers against zero-day network attacks? A. SONAR B. Client Firewall C. Intrusion Prevention D. System Lockdown Answer: C 2.According to Symantec, what is a botnet? A. systems infected with the same virus strain B. groups of systems performing remote tasks without the users' knowledge C. groups of computers configured to steal credit card records D. compromised systems opening communication to an IRC channel Answer: B 3.A financial company has a security policy that prevents banking system workstations from connecting to the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from working on the company's workstations? A. Insight B. Application and Device Control C. Network Threat Protection D. LiveUpdate Answer: A 4.In addition to performance improvements, which two benefits does Insight provide? (Select two.) A. reputation scoring for documents B. zero-day threat detection C. protection against system file modifications D. false positive mitigation E. blocking of malicious websites Answer: BD 5.How does the Intrusion Prevention System add an additional layer of protection to Network Threat Protection? A. It inspects the TCP packet headers and tracks the sequence number. B. It performs deep packet inspection, reading the packet headers, and data portion. C. It examines TCP/IP traffic from the application and traces the source of the traffic. D. It monitors IP datagrams for abnormalities. Answer: B 6.The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant. Which SONAR sub-feature can block new variants of the same family, based on sequence of events? A. artificial intelligence B. behavioral heuristic
2/5
Slide 4: The safer , easier way to help you pass any IT exams.
C. human authored signatures D. behavioral policy lockdown Answer: C 7.Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks such obfuscated attacks? A. SONAR B. Bloodhound heuristic virus detection C. Client Firewall D. Browser Intrusion Prevention Answer: D 8.Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files? A. Application Control B. SONAR C. Client Firewall D. Exceptions Answer: A 9.A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection 12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention technologies. Why would Intrusion Prevention be unable to block all communications from an attacking host? A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host. B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it. C. Intrusion Prevention definitions are out-of-date. D. Intrusion Prevention is set to log only. Answer: A 10.Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file? A. Shared Insight Cache server B. Symantec Endpoint Protection client C. Symantec Endpoint Protection Manager D. LiveUpdate Administrator server Answer: B 11.Which Symantec Endpoint Protection 12.1 component provides services to improve the performance of virtual client scanning? A. Shared Insight Cache server B. LiveUpdate Administrator server C. Symantec Protection Center D. Group Update Provider
3/5
Slide 5: The safer , easier way to help you pass any IT exams.
Answer: A 12.How many Symantec Endpoint Protection Managers can be connected to an embedded database? A. 1 B. 2 C. 5 D. 10 Answer: A 13.Which component is required in order to run Symantec Endpoint Protection 12.1 protection technologies? A. Symantec Endpoint Protection Manager B. Symantec Endpoint Protection client C. LiveUpdate Administrator server D. Symantec Protection Center Answer: B 13.Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec Endpoint Protection Manager and other products, along with cross-product reporting? A. Symantec Reporting server B. Symantec Security Information Manager C. IT Analytics D. Symantec Protection Center Answer: D 14.Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere? A. Symantec Endpoint Protection Manager embedded database B. Symantec Endpoint Protection Manager remote database C. LiveUpdate Administrator server D. Shared Insight Cache server Answer: A 15.Which Symantec Endpoint Protection 12.1 component improves performance because known good files are skipped? A. LiveUpdate Administrator server B. Group Update Provider C. Shared Insight Cache server D. Central Quarantine server Answer: C 16.How can an administrator manage multiple, independent companies from one database while maintaining independent groups, computers, and policies? A. Set up limited administrators with appropriate rights. B. Set up separate domains.
4/5
Slide 6: The safer , easier way to help you pass any IT exams.
C. Set up additional sites using a single database. D. Set up separate locations and turn off inheritance. Answer: B 17.A company with one site has a factory with computers in the manufacturing area. Both factory managers and operators need to log in to these shared computers. Different policies will be applied depending on whether the individual logging in to the machine is a manager or an operator. Which Symantec Endpoint Protection 12.1 feature provides this ability? A. Computer mode B. Active Directory synchronization C. User mode D. Console authentication Answer: C 18.An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a system named SEPM01. The groups and policies that were previously in the SEPM01 console are unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for this change? A. The administrator was modified from using Computer mode to User mode. B. The administrator was logged in to the incorrect domain for SEPM01. C. The administrator was changed from a limited administrator to a system administrator. D. The administrator was using the Web console instead of the Java console. Answer: B 19.Which two objects in the Symantec Endpoint Protection Manager console describe the most granular level to which a policy can be applied? (Select two.) A. Site B. Domain C. Group D. Location E. Computer F. User Answer: CD 20.An administrator creates a new domain in the Symantec Endpoint Protection Manager console. How can the administrator copy policies from the old domain to the new domain? A. Export the policy from the old domain and import it into the new domain. B. Copy the policy in the old domain and paste the policy into the new domain. C. Copy the old domain's policy XML file into the folder for the new domain. D. Back up the old domain's database and restore it into the new domain. Answer: A
5/5
Slide 7: Welcome to Killtest.com to get this exam pdf and then prepare your exam well. If you have any other questions, plz contact with us in time via this email support@killtest.com . Thanks !
