Question 1

A company uses multiple control centers. What must be done to ensure legitimate NDRs are recognized by Bounce Attack Prevention across all scanners?

Accepted Answer

A)  configure the same seed value on each control center 
B)  configure the same administrator email address across both control centers 
C)  configure the same seed value on each scanner 
D)  configure both control centers with the same internal email hosts 
A)  configure the same seed value on each control center 
B)  configure the same administrator email address across both control centers 
C)  configure the same seed value on each scanner 
D)  configure both control centers with the same internal email hosts

Question 2

After a configurable period of time, a suspect virus is released from the Suspect Virus Quarantine. What happens to it next?

Accepted Answer

A)  An alert is sent to the email administrator. 
B)  The attachment is removed and the original message is delivered to the recipient. 
C)  It is rescanned. 
D)  It is moved to quarantine. 
A)  An alert is sent to the email administrator. 
B)  The attachment is removed and the original message is delivered to the recipient. 
C)  It is rescanned. 
D)  It is moved to quarantine.

Question 3

Which MTA operation is used if queues need to be drained to remove a host from use and continue scanning and delivery of messages?

Accepted Answer

A)  delete the Scanner from the Control Center so that it is no longer used 
B)  set the Scanner configuration to "Pause message scanning and delivery" 
C)  set the Scanner configuration to "Do not accept incoming messages" 
D)  disable the Conduit so that new messages are not accepted 
A)  delete the Scanner from the Control Center so that it is no longer used 
B)  set the Scanner configuration to "Pause message scanning and delivery" 
C)  set the Scanner configuration to "Do not accept incoming messages" 
D)  disable the Conduit so that new messages are not accepted

Question 4

How does enabling and configuring sender authentication options in Symantec Messaging Gateway 10.5 help to protect against spam?

Accepted Answer

A)  by protecting against messages sent from trusted partners 
B)  by protecting against messages sent using a Sendmail MTA 
C)  by protecting against messages with a forged message ID 
D)  by protecting against messages with forged sender domains 
A)  by protecting against messages sent from trusted partners 
B)  by protecting against messages sent using a Sendmail MTA 
C)  by protecting against messages with a forged message ID 
D)  by protecting against messages with forged sender domains

Question 5

A DLP administrator is checking the System Overview in the Enforce management console, and all of the detection servers are showing as "unknown". The Vontu services are up and running on the detection servers. Thousands of .IDC files are building up in the Incidents directory on the detection servers. There is good network connectivity between the detection servers and the Enforce server when testing with the telnet command. How should the administrator bring the detection servers to a running state in the Enforce management console?

Accepted Answer

A)  Restart the Vontu Update Service on the Enforce server 
B)  Ensure the Vontu Monitor Controller service is running in the Enforce server 
C)  Delete all of the .BAD files in the Incidents folder on the Enforce server 
D)  Restart the Vontu Monitor Service on all the affected detection servers 
A)  Restart the Vontu Update Service on the Enforce server 
B)  Ensure the Vontu Monitor Controller service is running in the Enforce server 
C)  Delete all of the .BAD files in the Incidents folder on the Enforce server 
D)  Restart the Vontu Monitor Service on all the affected detection servers

Question 6

Symantec Messaging Gateway 10.5 will be deployed to receive mail directly from the Internet. In this situation, which option should be selected within the Inbound Mail Filtering - Accepted Hosts step of the site setup wizard?

Accepted Answer

A)  Enable MX lookup 
B)  Define a list of domains 
C)  Specify IP addresses/domains 
D)  Select all IP addresses 
A)  Enable MX lookup 
B)  Define a list of domains 
C)  Specify IP addresses/domains 
D)  Select all IP addresses

Question 7

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP 15.0? (Choose two.)

Accepted Answer

A)  Endpoint Prevent 
B)  Cloud Service for Email 
C)  Network Prevent for Email 
D)  Network Discover 
E)  Cloud Detection Service 
A)  Endpoint Prevent 
B)  Cloud Service for Email 
C)  Network Prevent for Email 
D)  Network Discover 
E)  Cloud Detection Service

Question 8

How should a DLP administrator exclude a custom endpoint application named "custom_app.exe" from being monitoring by Application File Access Control?

Accepted Answer

A)  Add "custom_app.exe" to the "Application Whitelist" on all Endpoint servers. 
B)  Add "custom_app.exe" Application Monitoring Configuration and de-select all its channel options. 
C)  Add "custom_app_.exe" as a filename exception to the Endpoint Prevent policy. 
D)  Add "custom_app.exe" to the "Program Exclusion List" in the agent configuration settings. 
A)  Add "custom_app.exe" to the "Application Whitelist" on all Endpoint servers. 
B)  Add "custom_app.exe" Application Monitoring Configuration and de-select all its channel options. 
C)  Add "custom_app_.exe" as a filename exception to the Endpoint Prevent policy. 
D)  Add "custom_app.exe" to the "Program Exclusion List" in the agent configuration settings.

Question 9

Which feature, when enabled through the directory data sources, allows third party MTAs the ability to relay through Symantec Messaging Gateway 10.5 and protects it against becoming an open relay?

Accepted Answer

A)  MTA verification 
B)  Recipient address validation 
C)  TLS certificate authentication 
D)  SMTP authentication 
A)  MTA verification 
B)  Recipient address validation 
C)  TLS certificate authentication 
D)  SMTP authentication

Question 10

What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?

Accepted Answer

A)  User > CloudSOC Gatelet > DLP Cloud Detection Service > Application 
B)  User > Enforce > Application 
C)  User > Enforce > CloudSOC > Application 
D)  User > CloudSOC Gatelet > Enforce > Application 
A)  User > CloudSOC Gatelet > DLP Cloud Detection Service > Application 
B)  User > Enforce > Application 
C)  User > Enforce > CloudSOC > Application 
D)  User > CloudSOC Gatelet > Enforce > Application

Question 11

Which additional Email Reports Data collection must be enabled to track Top Probe Accounts via reports?

Accepted Answer

A)  Spam and Unwanted Mail 
B)  Submissions 
C)  Sender IP connections 
D)  Invalid Recipients 
A)  Spam and Unwanted Mail 
B)  Submissions 
C)  Sender IP connections 
D)  Invalid Recipients

Question 12

What is Application Detection Configuration?

Accepted Answer

A)  The Cloud Detection Service (CDS) process that tells Enforce a policy has been violated 
B)  The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CD
C)  for files in transit to or residing in Cloud apps 
C)  The terminology describing the Data Loss Prevention (DLP) process within the CloudSOC administration portal 
D)  The setting configured within the user interface (UI) that determines whether CloudSOC should send a file to Cloud Detection Service (CDS) for analysis. 
A)  The Cloud Detection Service (CDS) process that tells Enforce a policy has been violated 
B)  The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CD
C)  for files in transit to or residing in Cloud apps 
C)  The terminology describing the Data Loss Prevention (DLP) process within the CloudSOC administration portal 
D)  The setting configured within the user interface (UI) that determines whether CloudSOC should send a file to Cloud Detection Service (CDS) for analysis.

Question 13

Why would an administrator set the Similarity Threshold to s=zero when testing and tuning a Vector Machine Learning (VML) profile?

Accepted Answer

A)  To capture the matches to the Positive set 
B)  To capture the matches to the negative set 
C)  To see the false negatives only 
D)  To see the entire range of potential matches 
A)  To capture the matches to the Positive set 
B)  To capture the matches to the negative set 
C)  To see the false negatives only 
D)  To see the entire range of potential matches

Question 14

A diagnostics package for a scanner-only appliance can be generated from the GUI in Symantec Messaging Gateway 10.5. If the package is small (less than 5 MB), which transfer protocol type should be used by the administrator to verify the diagnostics package before providing it to technical support for analysis?

Accepted Answer

A)  SMTP 
B)  Download to desktop 
C)  FTP 
D)  SCP 
A)  SMTP 
B)  Download to desktop 
C)  FTP 
D)  SCP

Question 15

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration. What is one possible reason that the agent fails to receive the new configuration?

Accepted Answer

A)  The new agent configuration was saved but not applied to any endpoint groups. 
B)  The new agent configuration was copied and modified from the default agent configuration. 
C)  The default agent configuration must be disabled before the new configuration can take effect. 
D)  The Endpoint server needs to be recycled so that the new agent configuration can take effect. 
A)  The new agent configuration was saved but not applied to any endpoint groups. 
B)  The new agent configuration was copied and modified from the default agent configuration. 
C)  The default agent configuration must be disabled before the new configuration can take effect. 
D)  The Endpoint server needs to be recycled so that the new agent configuration can take effect.

Question 16

Which two Network Discover/Cloud Storage targets apply Information Centric Encryption as policy response rules?

Accepted Answer

A)  Microsoft Exchange 
B)  Windows File System 
C)  SQL Databases 
D)  Microsoft SharePoint 
E)  Network File System (NFS) 
A)  Microsoft Exchange 
B)  Windows File System 
C)  SQL Databases 
D)  Microsoft SharePoint 
E)  Network File System (NFS)

Question 17

An organization would like to participate in the Symantec Probe Network without having to manually create decoy email accounts. The organization wants to make sure that the addresses that participate in the Symantec Probe Network are currently receiving email. Which directory data source function should be enabled to help in this situation?

Accepted Answer

A)  recipient validation 
B)  address resolution 
C)  SMTP authentication 
D)  LDAP routing 
A)  recipient validation 
B)  address resolution 
C)  SMTP authentication 
D)  LDAP routing

Question 18

What happens to a message after it has been identified as a suspect virus and placed into the suspect virus quarantine?

Accepted Answer

A)  It is automatically deleted after 7 days. 
B)  It is rescanned when the configured hold time has elapsed. 
C)  It is stored in the Central Quarantine Server. 
D)  It is forwarded to Symantec Security Response. 
A)  It is automatically deleted after 7 days. 
B)  It is rescanned when the configured hold time has elapsed. 
C)  It is stored in the Central Quarantine Server. 
D)  It is forwarded to Symantec Security Response.

Question 19

Which TCP port is used for communication between the Control Center and the scanner(s)?

Accepted Answer

A)  41001 
B)  41002 
C)  41004 
D)  41080 
A)  41001 
B)  41002 
C)  41004 
D)  41080

Question 20

Which two report file formats are available in Symantec Messaging Gateway 10.5 for executive summary reports? (Select two.)

Accepted Answer

A)  CSV 
B)  PDF 
C)  DOCX 
D)  XML 
E)  HTML 
A)  CSV 
B)  PDF 
C)  DOCX 
D)  XML 
E)  HTML

A company uses multiple control centers. What must be done to ensure legitimate NDRs are recognized by Bounce Attack Prevention across all scanners?

After a configurable period of time, a suspect virus is released from the Suspect Virus Quarantine. What happens to it next?

Which MTA operation is used if queues need to be drained to remove a host from use and continue scanning and delivery of messages?

How does enabling and configuring sender authentication options in Symantec Messaging Gateway 10.5 help to protect against spam?

Symantec Messaging Gateway 10.5 will be deployed to receive mail directly from the Internet. In this situation, which option should be selected within the Inbound Mail Filtering - Accepted Hosts step of the site setup wizard?

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP 15.0? (Choose two.)

How should a DLP administrator exclude a custom endpoint application named "custom_app.exe" from being monitoring by Application File Access Control?

Which feature, when enabled through the directory data sources, allows third party MTAs the ability to relay through Symantec Messaging Gateway 10.5 and protects it against becoming an open relay?

What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?

Which additional Email Reports Data collection must be enabled to track Top Probe Accounts via reports?

What is Application Detection Configuration?

Why would an administrator set the Similarity Threshold to s=zero when testing and tuning a Vector Machine Learning (VML) profile?

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration. What is one possible reason that the agent fails to receive the new configuration?

Which two Network Discover/Cloud Storage targets apply Information Centric Encryption as policy response rules?

What happens to a message after it has been identified as a suspect virus and placed into the suspect virus quarantine?

Which TCP port is used for communication between the Control Center and the scanner(s)?

Which two report file formats are available in Symantec Messaging Gateway 10.5 for executive summary reports? (Select two.)

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec Data Loss Prevention 12 (Broadcom)

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters

Exam 4: Administration of Symantec ProxySG 6.7

A company uses multiple control centers. What must be done to ensure legitimate NDRs are recognized by Bounce Attack Prevention across all scanners?

After a configurable period of time, a suspect virus is released from the Suspect Virus Quarantine. What happens to it next?

Which MTA operation is used if queues need to be drained to remove a host from use and continue scanning and delivery of messages?

How does enabling and configuring sender authentication options in Symantec Messaging Gateway 10.5 help to protect against spam?

Symantec Messaging Gateway 10.5 will be deployed to receive mail directly from the Internet. In this situation, which option should be selected within the Inbound Mail Filtering - Accepted Hosts step of the site setup wizard?

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP 15.0? (Choose two.)

How should a DLP administrator exclude a custom endpoint application named "custom_app.exe" from being monitoring by Application File Access Control?

Which feature, when enabled through the directory data sources, allows third party MTAs the ability to relay through Symantec Messaging Gateway 10.5 and protects it against becoming an open relay?

What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?

Which additional Email Reports Data collection must be enabled to track Top Probe Accounts via reports?

What is Application Detection Configuration?

Why would an administrator set the Similarity Threshold to s=zero when testing and tuning a Vector Machine Learning (VML) profile?

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration. What is one possible reason that the agent fails to receive the new configuration?

Which two Network Discover/Cloud Storage targets apply Information Centric Encryption as policy response rules?

What happens to a message after it has been identified as a suspect virus and placed into the suspect virus quarantine?

Which TCP port is used for communication between the Control Center and the scanner(s)?

Which two report file formats are available in Symantec Messaging Gateway 10.5 for executive summary reports? (Select two.)

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec Data Loss Prevention 12 (Broadcom)

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters