Symantec ST0-134 問題集

質問 1：
Refer to the exhibit.

A company is using a custom application that writes its application settings in the registry. An administrator plans to prevent users from modifying these values, while ensuring that the custom application still functions correctly. An Application and Device Control policy is created with an application rule to block access to create, delete, or write attempts, for the registry keys used by the custom application. One way to ensure users are prohibited from the registry keys, but the custom application can still modify them, is to add an Application Control exception for the custom application. What is another way to ensure this functionality?
A. Add an application rule set that allows access to read attempts for the registry keys.
B. Add an application rule to allow access to create, delete, or write attempts, to the customapplication folder.
C. Add an application rule to allow access to create, delete, or write attempts for the customapplication.
D. Add an application rule to allow access to read attempts for the registry keys.
正解：C

質問 2：
Which notification action can be performed when a security-related condition is met?
A. Alert with a GUI popup on the admin console.
B. Send an SNMP trap.
C. Run a batch file or another executable file.
D. Send an alert to a client.
正解：C

質問 3：
What is the likely impact of increasing the Download Insight sensitivity?
A. It would block files that trend towards a poor reputation and decrease false positives.
B. It would allow only files that trend toward a good reputation and increases false positives.
C. It would allow only files with a good reputation and decrease false positives.
D. It would block files that have a poor reputation and decrease false positives.
正解：B

質問 4：
An administrator needs to check when and by which account a policy was modified. Which log query should the administrator use?
A. Access
B. System
C. Audit
D. Compliance
正解：C

質問 5：
What is a characteristic of a Symantec Endpoint Protection (SEP) domain?
A. Data for each domain is stored in its own separate SEP database.
B. Each domain has its own management server and database.
C. Every administrator from one domain can view data in other domains.
D. Domains share the same management server and database.
正解：D

質問 6：
According to Symantec, what is a botnet?
A. compromised systems opening communication to an IRC channel
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. systems infected with the same virus strain
正解：B

質問 7：
In which client management log can an administrator identify when the client last connected to the Symantec Endpoint Protection Manager?
A. Event
B. System
C. Audit
D. Compliance
正解：B

質問 8：
Which option is unavailable in the Symantec Endpoint Protection console Run a command on the group menu item?
A. Disable SONAR
B. Update content and scan
C. Disable Network Threat Protection
D. Scan
正解：A