Symantec meilleur examen 250-315, questions et réponses

Dans cette société de plus en plus intense, nous vous proposons à choisir une façon de se former plus efficace : moins de temps et d'argent dépensé. Pass4Test peut vous offrir une bonne solution avec une plus grande space à développer.

Après une longue attente, les documentations de test Symantec 250-315 qui combinent tous les efforts des experts de Pas4Test sont finalement sorties. Les documentations de Pass4Test sont bien répandues pendant les candidats. L'outil de formation est réputée par sa haute précision et grade couverture des questions, d'ailleurs, il est bien proche que test réel. Vous pouvez réussir le test Symantec 250-315 à la première fois.

Pass4Test a une grande équipe composée des experts d'expérience dans l'industrie IT. Leurs connaissances professionnelles et les recherches font une bonne Q&A, qui vous permet à passer le test Symantec 250-315. Dans Pass4Test, vous pouvez trouver une façon plus convenable à se former. Les resources de Pass4Test sont bien fiable. Choisissez Pass4Test, choisissez un raccourci à réussir le test Symantec 250-315.

Les experts de Pass4Test ont fait sortir un nouveau guide d'étude de Certification Symantec 250-315, avec ce guide d'étude, réussir ce test a devenu une chose pas difficile. Pass4Test vous permet à réussir 100% le test Symantec 250-315 à la première fois. Les questions et réponses vont apparaître dans le test réel. Pass4Test peut vous donner une Q&A plus complète une fois que vous choisissez nous. D'ailleurs, la mise à jour gratuite pendant un an est aussi disponible pour vous.

Le guide d'étude de Pas4Test comprend l'outil de se former et même que le test de simulation très proche de test réel. Pass4Test vous permet de se forcer les connaissances professionnelles ciblées à l'examen Certification Symantec 250-315. Il n'y a pas de soucis à réussir le test avec une haute note.

Code d'Examen: 250-315
Nom d'Examen: Symantec (Administration of Symantec Endpoint Protection 12.1)
Questions et réponses: 167 Q&As

Pass4Test peut offrir nombreux de documentations aux candidats de test Symantec 250-315, et aider les candidats à réussir le test. Les marétiaux visés au test Symantec 250-315 sont tout recherchés par les experts avec leurs connaissances professionnelles et les expériences. Les charactéristiques se reflètent dans la bonne qualité de Q&A, la vitesse de la mise à jour. Le point plus important est que notre Q&A est laquelle le plus proche du test réel. Pass4Test peut vous permettre à réussir le test Symantec 250-315 100%.

250-315 Démo gratuit à télécharger: http://www.pass4test.fr/250-315.html

NO.1 In addition to performance improvements, which two benefits does Insight provide? (Select two.)
A. reputation scoring for documents
B. zero-day threat detection
C. protection against system file modifications
D. false positive mitigation
E. blocking of malicious websites
Answer: B,D

certification Symantec   250-315   certification 250-315   certification 250-315   250-315   250-315

NO.2 A financial company has a security policy that prevents banking system workstations from connecting to
the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from
working on the company's workstations?
A. Insight
B. Application and Device Control
C. Network Threat Protection
D. LiveUpdate
Answer: A

Symantec   250-315   certification 250-315   certification 250-315

NO.3 How does the Intrusion Prevention System add an additional layer of protection to Network Threat
Protection?
A. It inspects the TCP packet headers and tracks the sequence number.
B. It performs deep packet inspection, reading the packet headers, and data portion.
C. It examines TCP/IP traffic from the application and traces the source of the traffic.
D. It monitors IP datagrams for abnormalities.
Answer: B

Symantec examen   250-315 examen   250-315

NO.4 Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec
Endpoint Protection Manager and other products, along with cross-product reporting?
A. Symantec Reporting server
B. Symantec Security Information Manager
C. IT Analytics
D. Symantec Protection Center
Answer: D

Symantec examen   250-315   250-315   certification 250-315

NO.5 How can an administrator manage multiple, independent companies from one database while
maintaining independent groups, computers, and policies?
A. Set up limited administrators with appropriate rights.
B. Set up separate domains.
C. Set up additional sites using a single database.
D. Set up separate locations and turn off inheritance.
Answer: B

certification Symantec   250-315 examen   certification 250-315

NO.6 The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant.
Which SONAR sub-feature can block new variants of the same family, based on sequence of events?
A. artificial intelligence
B. behavioral heuristic
C. human authored signatures
D. behavioral policy lockdown
Answer: C

Symantec   250-315 examen   250-315   certification 250-315

NO.7 According to Symantec, what is a botnet.?
A. systems infected with the same virus strain
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. compromised systems opening communication to an IRC channel
Answer: B

Symantec   certification 250-315   250-315   250-315

NO.8 Which component is required in order to run Symantec Endpoint Protection 12.1 protection
technologies?
A. Symantec Endpoint Protection Manager
B. Symantec Endpoint Protection client
C. LiveUpdate Administrator server
D. Symantec Protection Center
Answer: B

Symantec examen   certification 250-315   certification 250-315   250-315 examen

NO.9 Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like
W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files?
A. Application Control
B. SONAR
C. Client Firewall
D. Exceptions
Answer: A

Symantec   250-315   250-315   250-315 examen   certification 250-315

NO.10 How many Symantec Endpoint Protection Managers can be connected to an embedded database?
A. 1
B. 2
C. 5
D. 10
Answer: A

Symantec examen   250-315   250-315 examen   250-315 examen

NO.11 Which Symantec Endpoint Protection 12.1 component improves performance because known good
files are skipped?
A. LiveUpdate Administrator server
B. Group Update Provider
C. Shared Insight Cache server
D. Central Quarantine server
Answer: C

Symantec   250-315 examen   250-315   250-315 examen   250-315

NO.12 An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a
system named SEPM01. The groups and policies that were previously in the SEPM01 console are
unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for
this change?
A. The administrator was modified from using Computer mode to User mode.
B. The administrator was logged in to the incorrect domain for SEPM01.
C. The administrator was changed from a limited administrator to a system administrator.
D. The administrator was using the Web console instead of the Java console.
Answer: B

certification Symantec   250-315   250-315   certification 250-315

NO.13 Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass
traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks
such obfuscated attacks?
A. SONAR
B. Bloodhound heuristic virus detection
C. Client Firewall
D. Browser Intrusion Prevention
Answer: D

Symantec   certification 250-315   certification 250-315   250-315 examen

NO.14 A company with one site has a factory with computers in the manufacturing area. Both factory
managers and operators need to log in to these shared computers. Different policies will be applied
depending on whether the individual logging in to the machine is a manager or an operator. Which
Symantec Endpoint Protection 12.1 feature provides this ability?
A. Computer mode
B. Active Directory synchronization
C. User mode
D. Console authentication
Answer: C

Symantec   250-315   250-315

NO.15 Which Symantec Endpoint Protection 12.1 component provides services to improve the performance
of virtual client scanning?
A. Shared Insight Cache server
B. LiveUpdate Administrator server
C. Symantec Protection Center
D. Group Update Provider
Answer: A

Symantec   certification 250-315   250-315   250-315

NO.16 Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?
A. Shared Insight Cache server
B. Symantec Endpoint Protection client
C. Symantec Endpoint Protection Manager
D. LiveUpdate Administrator server
Answer: B

certification Symantec   250-315   250-315   250-315   certification 250-315

NO.17 Which two objects in the Symantec Endpoint Protection Manager console describe the most granular
level to which a policy can be applied? (Select two.)
A. Site
B. Domain
C. Group
D. Location
E. Computer
F. User
Answer: C,D

Symantec examen   certification 250-315   250-315   250-315

NO.18 A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection
12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention
technologies. Why would Intrusion Prevention be unable to block all communications from an attacking
host?
A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host.
B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it.
C. Intrusion Prevention definitions are out-of-date.
D. Intrusion Prevention is set to log only.
Answer: A

Symantec   250-315   250-315   250-315

NO.19 Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere?
A. Symantec Endpoint Protection Manager embedded database
B. Symantec Endpoint Protection Manager remote database
C. LiveUpdate Administrator server
D. Shared Insight Cache server
Answer: A

certification Symantec   250-315   certification 250-315   250-315

NO.20 Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers
against zero-day network attacks?
A. SONAR
B. Client Firewall
C. Intrusion Prevention
D. System Lockdown
Answer: C

certification Symantec   250-315 examen   250-315

Le produit de Pass4Test que vous choisissez vous met le pied sur la première marche du pic de l'Industrie IT, et vous serez plus proche de votre rêve. Les matériaux offerts par Pass4Test peut non seulement vous aider à réussir le test Symantec 250-315, mais encore vous aider à se renforcer les connaissances professionnelles. Le service de la mise à jour pendant un an est aussi gratuit pour vous.

Pass4Test offre de Symantec 250-315 matériaux d'essai

Dans ce monde d'informatique, l'industrie IT est suivi par de plus en plus de ges. Dans ce domaine demandant beaucoup de techniques, il faut des Certificat à se preuver les techniques professionnelle. Les Certificats IT sont improtant pour un interviewé pendant un entretien. C'est pas facile à passer le test Symantec 250-315, donc c'est pourquoi beaucoup de professionnels qui choisissent ce Certificat pour se preuver.

Un bon choix de l'outil à se former est le point essentiel à passer le test Symantec 250-315, et les documentations à propos de rechercher le test Symantec 250-315 est toujours une part plus importante pendant la préparation de test Certification. Les Q&As offertes par les experts de Pass4Test sont presque même que les tests réels. Pass4Test est un site web particulièrement en apportant les facilités aux gens qui veulent passer le test Certification.

Code d'Examen: 250-315
Nom d'Examen: Symantec (Administration of Symantec Endpoint Protection 12.1)
Questions et réponses: 167 Q&As

Pass4Test est un site qui peut réalise le rêve de beaucoup de professionnels. Pass4Test peut vous donner un coup de main pour réussir le test Certification Symantec 250-315 via son guide d'étude. Est-ce que vous vous souciez de test Certification Symantec 250-315? Est-ce que vous êtes en cours de penser à chercher quelques Q&As à vous aider? Pass4Test peut résoudre ces problèmes. Les documentations offertes par Pass4Test peuvent vous provider une préparation avant le test plus efficace. Le test de simulation de Pass4Test est presque le même que le test réel. Étudier avec le guide d'étude de Pass4Test, vous pouvez passer le test avec une haute note.

Tant que vous avez besion de participer l'examen, nous pouvons toujours mettre à jour de matériaux à propos de test Certification Symantec 250-315. Le guide d'étude de Pass4Test comprend les excercices de Symantec 250-315 et la Q&A qui peut vous permetrre à réussir 100% le test Symantec 250-315. Vous pouvez faire une meilleure préparation pour le test. D'ailleurs, la mise à jour pendant un an après vendre est gratuite pour vous.

Pass4Test vous promet de vous aider à passer le test Symantec 250-315, vous pouvez télécharger maintenant les Q&As partielles de test Symantec 250-315 en ligne. Il y a encore la mise à jour gratuite pendant un an pour vous. Si vous malheureusement rater le test, votre argent sera 100% rendu.

Le produit de Pass4Test est réputée par une bonne qualité et fiabilité. Vous pouvez télécharger le démo grantuit pour prendre un essai, nons avons la confiance que vous seriez satisfait. Vous n'aurez plus de raison à s'hésiter en face d'un aussi bon produit. Ajoutez notre Q&A au panier, vous aurez une meilleure préparation avant le test.

Ajoutez le produit de Pass4Test au panier, vous pouvez participer le test avec une 100% confiance. Bénéficiez du succès de test Symantec 250-315 par une seule fois, vous n'aurez pas aucune raison à refuser.

250-315 Démo gratuit à télécharger: http://www.pass4test.fr/250-315.html

NO.1 Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec
Endpoint Protection Manager and other products, along with cross-product reporting?
A. Symantec Reporting server
B. Symantec Security Information Manager
C. IT Analytics
D. Symantec Protection Center
Answer: D

Symantec   250-315   250-315 examen

NO.2 A financial company has a security policy that prevents banking system workstations from connecting to
the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from
working on the company's workstations?
A. Insight
B. Application and Device Control
C. Network Threat Protection
D. LiveUpdate
Answer: A

Symantec examen   250-315 examen   250-315   certification 250-315

NO.3 In addition to performance improvements, which two benefits does Insight provide? (Select two.)
A. reputation scoring for documents
B. zero-day threat detection
C. protection against system file modifications
D. false positive mitigation
E. blocking of malicious websites
Answer: B,D

certification Symantec   250-315   250-315   250-315

NO.4 Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass
traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks
such obfuscated attacks?
A. SONAR
B. Bloodhound heuristic virus detection
C. Client Firewall
D. Browser Intrusion Prevention
Answer: D

Symantec   250-315 examen   250-315

NO.5 Which component is required in order to run Symantec Endpoint Protection 12.1 protection
technologies?
A. Symantec Endpoint Protection Manager
B. Symantec Endpoint Protection client
C. LiveUpdate Administrator server
D. Symantec Protection Center
Answer: B

Symantec   250-315   certification 250-315   certification 250-315   250-315 examen

NO.6 How can an administrator manage multiple, independent companies from one database while
maintaining independent groups, computers, and policies?
A. Set up limited administrators with appropriate rights.
B. Set up separate domains.
C. Set up additional sites using a single database.
D. Set up separate locations and turn off inheritance.
Answer: B

certification Symantec   250-315 examen   250-315   250-315

NO.7 Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere?
A. Symantec Endpoint Protection Manager embedded database
B. Symantec Endpoint Protection Manager remote database
C. LiveUpdate Administrator server
D. Shared Insight Cache server
Answer: A

Symantec examen   250-315 examen   250-315   250-315   certification 250-315

NO.8 An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a
system named SEPM01. The groups and policies that were previously in the SEPM01 console are
unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for
this change?
A. The administrator was modified from using Computer mode to User mode.
B. The administrator was logged in to the incorrect domain for SEPM01.
C. The administrator was changed from a limited administrator to a system administrator.
D. The administrator was using the Web console instead of the Java console.
Answer: B

Symantec   certification 250-315   certification 250-315   250-315   certification 250-315

NO.9 A company with one site has a factory with computers in the manufacturing area. Both factory
managers and operators need to log in to these shared computers. Different policies will be applied
depending on whether the individual logging in to the machine is a manager or an operator. Which
Symantec Endpoint Protection 12.1 feature provides this ability?
A. Computer mode
B. Active Directory synchronization
C. User mode
D. Console authentication
Answer: C

Symantec examen   250-315 examen   certification 250-315   250-315 examen

NO.10 How many Symantec Endpoint Protection Managers can be connected to an embedded database?
A. 1
B. 2
C. 5
D. 10
Answer: A

Symantec   certification 250-315   certification 250-315

NO.11 Which Symantec Endpoint Protection 12.1 component improves performance because known good
files are skipped?
A. LiveUpdate Administrator server
B. Group Update Provider
C. Shared Insight Cache server
D. Central Quarantine server
Answer: C

Symantec examen   250-315   certification 250-315   certification 250-315

NO.12 Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like
W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files?
A. Application Control
B. SONAR
C. Client Firewall
D. Exceptions
Answer: A

Symantec   250-315   certification 250-315   250-315   250-315   250-315

NO.13 How does the Intrusion Prevention System add an additional layer of protection to Network Threat
Protection?
A. It inspects the TCP packet headers and tracks the sequence number.
B. It performs deep packet inspection, reading the packet headers, and data portion.
C. It examines TCP/IP traffic from the application and traces the source of the traffic.
D. It monitors IP datagrams for abnormalities.
Answer: B

Symantec examen   250-315   250-315   250-315   250-315 examen

NO.14 Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers
against zero-day network attacks?
A. SONAR
B. Client Firewall
C. Intrusion Prevention
D. System Lockdown
Answer: C

Symantec   250-315 examen   certification 250-315   250-315

NO.15 According to Symantec, what is a botnet.?
A. systems infected with the same virus strain
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. compromised systems opening communication to an IRC channel
Answer: B

Symantec examen   250-315 examen   250-315

NO.16 A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection
12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention
technologies. Why would Intrusion Prevention be unable to block all communications from an attacking
host?
A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host.
B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it.
C. Intrusion Prevention definitions are out-of-date.
D. Intrusion Prevention is set to log only.
Answer: A

certification Symantec   250-315 examen   certification 250-315   250-315   250-315

NO.17 Which two objects in the Symantec Endpoint Protection Manager console describe the most granular
level to which a policy can be applied? (Select two.)
A. Site
B. Domain
C. Group
D. Location
E. Computer
F. User
Answer: C,D

certification Symantec   250-315   certification 250-315   250-315 examen   certification 250-315

NO.18 Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?
A. Shared Insight Cache server
B. Symantec Endpoint Protection client
C. Symantec Endpoint Protection Manager
D. LiveUpdate Administrator server
Answer: B

certification Symantec   250-315 examen   certification 250-315

NO.19 Which Symantec Endpoint Protection 12.1 component provides services to improve the performance
of virtual client scanning?
A. Shared Insight Cache server
B. LiveUpdate Administrator server
C. Symantec Protection Center
D. Group Update Provider
Answer: A

Symantec   250-315   250-315   certification 250-315

NO.20 The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant.
Which SONAR sub-feature can block new variants of the same family, based on sequence of events?
A. artificial intelligence
B. behavioral heuristic
C. human authored signatures
D. behavioral policy lockdown
Answer: C

Symantec   250-315   250-315   certification 250-315   250-315 examen

Participer au test Symantec 250-315 est un bon choix, parce que dans l'Industire IT, beaucoup de gens tirent un point de vue que le Certificat Symantec 250-315 symbole bien la professionnalité d'un travailleur dans cette industrie.

Le plus récent matériel de formation Symantec 250-315

Selon les feedbacks offerts par les candidats, c'est facile à réussir le test Symantec 250-315 avec l'aide de la Q&A de Pass4Test qui est recherché particulièrement pour le test Certification Symantec 250-315. C'est une bonne preuve que notre produit est bien effective. Le produit de Pass4Test peut vous aider à renforcer les connaissances demandées par le test Symantec 250-315, vous aurez une meilleure préparation avec l'aide de Pass4Test.

Pass4Test est un site d'offrir la bonne Q&A Symantec 250-315. Le produit offert par Pass4Test peut vous aider à réussir ce test très difficile. Si vous ajoutez le produit au panier, vous allez économiser le temps et l'effort. Le produiti Pass4Test est bien réputé dans l'Idustrie IT.

Les experts de Pass4Test profitent de leurs expériences et connaissances à augmenter successivement la qualité des docmentations pour répondre une grande demande des candidats, juste pour que les candidats soient permis à réussir le test Symantec 250-315 par une seule fois. Vous allez avoir les infos plus proches de test réel à travers d'acheter le produti de Pass4Test. Notre confiance sont venue de la grande couverture et la haute précision de nos Q&As. 100% précision des réponses vous donnent une confiance 100%. Vous n'auriez pas aucun soucis avant de participer le test.

Pass4Test est un seul site de provider le guide d'étude Symantec 250-315 de qualité. Peut-être que vous voyiez aussi les Q&A Symantec 250-315 dans autres sites, mais vous allez découvrir laquelle est plus complète. En fait, Pass4Test est aussi une resource de Q&A pour les autres site web.

Code d'Examen: 250-315
Nom d'Examen: Symantec (Administration of Symantec Endpoint Protection 12.1)
Questions et réponses: 167 Q&As

250-315 Démo gratuit à télécharger: http://www.pass4test.fr/250-315.html

NO.1 Which Symantec Endpoint Protection 12.1 component improves performance because known good
files are skipped?
A. LiveUpdate Administrator server
B. Group Update Provider
C. Shared Insight Cache server
D. Central Quarantine server
Answer: C

Symantec examen   250-315 examen   certification 250-315

NO.2 A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection
12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention
technologies. Why would Intrusion Prevention be unable to block all communications from an attacking
host?
A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host.
B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it.
C. Intrusion Prevention definitions are out-of-date.
D. Intrusion Prevention is set to log only.
Answer: A

Symantec   250-315 examen   certification 250-315   certification 250-315   250-315 examen

NO.3 An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a
system named SEPM01. The groups and policies that were previously in the SEPM01 console are
unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for
this change?
A. The administrator was modified from using Computer mode to User mode.
B. The administrator was logged in to the incorrect domain for SEPM01.
C. The administrator was changed from a limited administrator to a system administrator.
D. The administrator was using the Web console instead of the Java console.
Answer: B

Symantec examen   250-315   250-315 examen   250-315 examen

NO.4 Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere?
A. Symantec Endpoint Protection Manager embedded database
B. Symantec Endpoint Protection Manager remote database
C. LiveUpdate Administrator server
D. Shared Insight Cache server
Answer: A

certification Symantec   250-315 examen   250-315 examen

NO.5 A company with one site has a factory with computers in the manufacturing area. Both factory
managers and operators need to log in to these shared computers. Different policies will be applied
depending on whether the individual logging in to the machine is a manager or an operator. Which
Symantec Endpoint Protection 12.1 feature provides this ability?
A. Computer mode
B. Active Directory synchronization
C. User mode
D. Console authentication
Answer: C

Symantec examen   250-315   250-315   250-315

NO.6 Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like
W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files?
A. Application Control
B. SONAR
C. Client Firewall
D. Exceptions
Answer: A

Symantec   250-315   250-315 examen

NO.7 Which component is required in order to run Symantec Endpoint Protection 12.1 protection
technologies?
A. Symantec Endpoint Protection Manager
B. Symantec Endpoint Protection client
C. LiveUpdate Administrator server
D. Symantec Protection Center
Answer: B

Symantec examen   250-315   250-315 examen   250-315   certification 250-315

NO.8 Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass
traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks
such obfuscated attacks?
A. SONAR
B. Bloodhound heuristic virus detection
C. Client Firewall
D. Browser Intrusion Prevention
Answer: D

Symantec   250-315   250-315 examen   250-315   250-315 examen

NO.9 According to Symantec, what is a botnet.?
A. systems infected with the same virus strain
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. compromised systems opening communication to an IRC channel
Answer: B

Symantec examen   250-315   250-315   certification 250-315

NO.10 Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec
Endpoint Protection Manager and other products, along with cross-product reporting?
A. Symantec Reporting server
B. Symantec Security Information Manager
C. IT Analytics
D. Symantec Protection Center
Answer: D

Symantec   250-315   certification 250-315   250-315

NO.11 In addition to performance improvements, which two benefits does Insight provide? (Select two.)
A. reputation scoring for documents
B. zero-day threat detection
C. protection against system file modifications
D. false positive mitigation
E. blocking of malicious websites
Answer: B,D

Symantec   250-315 examen   certification 250-315   certification 250-315   250-315   250-315

NO.12 Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?
A. Shared Insight Cache server
B. Symantec Endpoint Protection client
C. Symantec Endpoint Protection Manager
D. LiveUpdate Administrator server
Answer: B

Symantec examen   250-315 examen   certification 250-315

NO.13 How can an administrator manage multiple, independent companies from one database while
maintaining independent groups, computers, and policies?
A. Set up limited administrators with appropriate rights.
B. Set up separate domains.
C. Set up additional sites using a single database.
D. Set up separate locations and turn off inheritance.
Answer: B

Symantec   certification 250-315   certification 250-315

NO.14 Which Symantec Endpoint Protection 12.1 component provides services to improve the performance
of virtual client scanning?
A. Shared Insight Cache server
B. LiveUpdate Administrator server
C. Symantec Protection Center
D. Group Update Provider
Answer: A

certification Symantec   250-315   250-315 examen

NO.15 The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant.
Which SONAR sub-feature can block new variants of the same family, based on sequence of events?
A. artificial intelligence
B. behavioral heuristic
C. human authored signatures
D. behavioral policy lockdown
Answer: C

certification Symantec   certification 250-315   250-315

NO.16 Which two objects in the Symantec Endpoint Protection Manager console describe the most granular
level to which a policy can be applied? (Select two.)
A. Site
B. Domain
C. Group
D. Location
E. Computer
F. User
Answer: C,D

Symantec   250-315 examen   250-315   250-315

NO.17 Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers
against zero-day network attacks?
A. SONAR
B. Client Firewall
C. Intrusion Prevention
D. System Lockdown
Answer: C

certification Symantec   250-315   certification 250-315   250-315 examen   250-315 examen   certification 250-315

NO.18 How many Symantec Endpoint Protection Managers can be connected to an embedded database?
A. 1
B. 2
C. 5
D. 10
Answer: A

Symantec   certification 250-315   250-315 examen   certification 250-315

NO.19 How does the Intrusion Prevention System add an additional layer of protection to Network Threat
Protection?
A. It inspects the TCP packet headers and tracks the sequence number.
B. It performs deep packet inspection, reading the packet headers, and data portion.
C. It examines TCP/IP traffic from the application and traces the source of the traffic.
D. It monitors IP datagrams for abnormalities.
Answer: B

certification Symantec   250-315   certification 250-315   certification 250-315   certification 250-315   250-315 examen

NO.20 A financial company has a security policy that prevents banking system workstations from connecting to
the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from
working on the company's workstations?
A. Insight
B. Application and Device Control
C. Network Threat Protection
D. LiveUpdate
Answer: A

Symantec   250-315   250-315   certification 250-315   250-315

En quelques années, le test de certification de Symantec 250-315 faisait un grand impact sur la vie quotidienne pour pas mal de gens. Voilà le problème, comme on peut réussir facilement le test de Symantec 250-315? Notre Pass4Test peut vous aider à tout moment à résourdre ce problème rapidement. Pass4Test peut vous offrir une bonne formation particulière à propos du test de certification 250-315. Notre outil de test formation est apporté par les IT experts. Chez Pass4Test, vous pouvez toujours trouver une formations à propos du test Certification 250-315, plus nouvelle et plus proche d'un test réel. Tu choisis le Pass4Test aujourd'hui, tu choisis le succès de test Certification demain.