Symantec ST0-134 問題集

質問 1：
Which Symantec Endpoint Protection technology blocks a downloaded program from installing browser plugins?
A. SONAR
B. Tamper Protection
C. Application and Device Control
D. Intrusion Prevention
正解：C

質問 2：
Which two criteria can an administrator use to determine hosts in a host group? (Select two.)
A. DNS Domain
B. Subnet
C. Application Protocol
D. Network Services
E. Network Adapters
正解：A,B

質問 3：
Which Intrusion Prevention feature is updated automatically?
A. Generic Exploit Blocking
B. Intrusion Prevention custom signatures
C. SNORT syntax
D. Auto-Protect
正解：A

質問 4：
Which authentication method must be used to provide the ability to reset forgotten passwords?
A. Symantec Management Server Authentication
B. Directory Authentication
C. Smart Card Authentication
D. RSA SecurID Authentication
正解：A

質問 5：
Where can an administrator obtain the Sylink.xml file?
A. by selecting the location and exporting the communication settings in the Symantec Endpoint Protection Manager Console
B. by selecting the client group and exporting the communication settings in the Symantec Endpoint Protection Manager Console
C. C\Program Files\Symantec\Symantec Endpoint Protection\Manager\data\inbox\agent\ folder on the Symantec Endpoint Protection Manager
D. C\Program Files\Symantec\Symantec Endpoint Protection\ folder on the client
正解：B

質問 6：
Refer to the exhibit.

A USB mouse is plugged in to a system that uses the device control displayed in the exhibit. What is the expected behavior?
A. The mouse is blocked until the user adds the device as a local client exception.
B. The mouse will work as normal because the Human Interface Device exclusion takes precedence.
C. The mouse is blocked until an administrator adds the device to the exception policy.
D. The mouse will work as normal because Mouse devices are missing from Blocked Devices.
正解：B

質問 7：
A Symantec Endpoint Protection (SEP) administrator creates a firewall policy to block FTP traffic and assigns the policy to all of the SEP clients. The network monitoring team informs theadministrator that a client system is making an FTP connection to a server. While investigating the problem from the SEP client GUI, the administrator notices that there are zero entries pertaining to FTP traffic in the SEP Traffic log or Packet log. While viewing the Network Activity dialog, there is zero inbound/outbound traffic for the FTP process. What is the most likely reason?
A. The block rule is below the blue line.
B. The server has an IPS exception for that traffic.
C. The server is in the IPS policy excluded hosts list.
D. Peer-to-peer authentication is allowing the traffic.
正解：C

質問 8：
Which two Symantec Endpoint Protection 12.1 (SEP) standalone tools are available for malware scanning and remediation? (Select two.)
A. Symantec Endpoint Recovery Tool
B. Symantec Power Eraser
C. Symantec Protection Center
D. Symantec Offline Image Scanner
E. CleanWipe
正解：A,B