Symantec Endpoint Protection 11 MR4
Exam Questions, Answers,
The exam is tough but
the guide from www.exams.ws was really helpfu.. Thanks
to the dumpers.
When Auto-Protect is enabled, protection is optional
for which type of file access?
What can an administrator do to proactively obtain information
about unknown devices on a network?
A. script a network audit using the Find Unmanaged Computers
B. create an Unmanaged Computer notification
C. schedule an audit report to send to the administrator
D. schedule regular LDAP synchronization
Which two actions are available when TruScan Proactive
Threat Scan detects a trojan or worm? (Select two.)
Immediately after installation, what does a client do
upon first contacting Symantec Endpoint Security Manager?
A. register with the manager
B. download the latest policy
C. update virus definitions
D. launch a full system scan
An administrator needs a TruScan Proactive Threat scan
that will detect a potential trojan, worm, or keylogger
as quickly as possible. How should the administrator
set the scan frequency?
A. set it to continuous
B. set it to scan new processes immediately
C. select the default setting
D. set it to 5 minutes
In Symantec Endpoint Protection, which default action
is taken when security risks such as spyware, adware,
hacking tools, remote access programs, and trackware
A. log the detection event only
B. delete the infected file
C. clean the risk
D. quarantine the file locally
Which scan types can a user initiate?
A. idle, active, or full scan
B. custom, idle, or full scan
C. active, custom, or fullscan
D. custom, quick, or fullscan
Which feature can be configured to increase or decrease
performance of scheduled scans?
A. scan frequency
B. CPU throttling
C. heartbeat interval
D. tuning options
In which order are exceptions processed?
A. AntiSpvware then AntiVirus
B. Administrator then User
C. Intrusion Prevention then Firewall
D. Computer mode then User mode