Question 1

Where should an administrator set the debug levels for an Endpoint Agent?

Accepted Answer

A)  Setting the log level within the Agent List 
B)  Advanced configuration within the Agent settings 
C)  Setting the log level within the Agent Overview 
D)  Advanced server settings within the Endpoint server 
A)  Setting the log level within the Agent List 
B)  Advanced configuration within the Agent settings 
C)  Setting the log level within the Agent Overview 
D)  Advanced server settings within the Endpoint server

Question 2

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?

Accepted Answer

A)  Add a "Limit Incident Data Retention" response rule with "Retain Original Message" option selected. 
B)  Modify the agent config.db to include the file 
C)  Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration 
D)  Modify the agent configuration and select the option "Retain Original Files" 
A)  Add a "Limit Incident Data Retention" response rule with "Retain Original Message" option selected. 
B)  Modify the agent config.db to include the file 
C)  Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration 
D)  Modify the agent configuration and select the option "Retain Original Files"

Question 3

Which logs will help an administrator determine why antispam rules have failed to update?

Accepted Answer

A)  Antispam Update logs 
B)  LiveUpdate logs 
C)  Conduit logs 
D)  Appliance syslog 
A)  Antispam Update logs 
B)  LiveUpdate logs 
C)  Conduit logs 
D)  Appliance syslog

Question 4

Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?

Accepted Answer

A)  The OCR engine must be installed on detection server other than the Enforce server. 
B)  The OCR server software must be installed on one or more dedicated (non-detection) Linux servers. 
C)  The OCR engine must be directly on the Enforce server. 
D)  The OCR server software must be installed on one or more dedicated (non-detection) Windows servers. 
A)  The OCR engine must be installed on detection server other than the Enforce server. 
B)  The OCR server software must be installed on one or more dedicated (non-detection) Linux servers. 
C)  The OCR engine must be directly on the Enforce server. 
D)  The OCR server software must be installed on one or more dedicated (non-detection) Windows servers.

Question 5

Which URL must be accessed to successfully register a newly added Symantec Messaging Gateway 10.5 license file?

Accepted Answer

A)  aztec.brightmail.com 
B)  license.symantec.com 
C)  register.brightmail.com 
D)  register.symantec.com 
A)  aztec.brightmail.com 
B)  license.symantec.com 
C)  register.brightmail.com 
D)  register.symantec.com

Question 6

Why would an administrator set the Similarity Threshold to zero when testing and tuning a Vector Machine Learning (VML) profile?

Accepted Answer

A)  To capture the matches to the Positive set 
B)  To capture the matches to the Negative set 
C)  To see the false negatives only 
D)  To see the entire range of potential matches 
A)  To capture the matches to the Positive set 
B)  To capture the matches to the Negative set 
C)  To see the false negatives only 
D)  To see the entire range of potential matches

Question 7

Which detection method depends on "training sets"?

Accepted Answer

A)  Form Recognition 
B)  Vector Machine Learning (VML) 
C)  Index Document Matching (IDM) 
D)  Exact Data Matching (EDM) 
A)  Form Recognition 
B)  Vector Machine Learning (VML) 
C)  Index Document Matching (IDM) 
D)  Exact Data Matching (EDM)

Question 8

What are two benefits of using attachment list policy resources in Symantec Messaging Gateway 10.5? (Select two.)

Accepted Answer

A)  Can help prevent confidential information from leaving the company 
B)  Can provide another level of defense against malware 
C)  Can increase message processing speed 
D)  Can protect against drive-by downloads 
E)  Can help prevent directory harvest attack (DH
A)  
A)  Can help prevent confidential information from leaving the company 
B)  Can provide another level of defense against malware 
C)  Can increase message processing speed 
D)  Can protect against drive-by downloads 
E)  Can help prevent directory harvest attack (DH
A)

Question 9

What is the default action taken during an email virus attack?

Accepted Answer

A)  Delete the message 
B)  Throttle the network connection 
C)  Reject SMTP connection 
D)  Defer SMTP connection 
A)  Delete the message 
B)  Throttle the network connection 
C)  Reject SMTP connection 
D)  Defer SMTP connection

Question 10

A Symantec Messaging Gateway 10.5 administrator needs to prevent bounce attacks. Where should the administrator enable this feature?

Accepted Answer

A)  Bad Senders policy 
B)  Antivirus policy 
C)  Directory Harvest Attack policy 
D)  Antispam policy 
A)  Bad Senders policy 
B)  Antivirus policy 
C)  Directory Harvest Attack policy 
D)  Antispam policy

Question 11

Which two detection servers are available as virtual appliances? (Choose two.)

Accepted Answer

A)  Network Monitor 
B)  Network Prevent for Web 
C)  Network Discover 
D)  Network Prevent for Email 
E)  Optical Character Recognition (OCR) 
A)  Network Monitor 
B)  Network Prevent for Web 
C)  Network Discover 
D)  Network Prevent for Email 
E)  Optical Character Recognition (OCR)

Question 12

During which phase of inbound message flow does Symantec Messaging Gateway 10.5 accept, reject, or defer messages on the basis of the message envelope?

Accepted Answer

A)  SMTP delivery 
B)  SMTP firewall 
C)  SMTP session 
D)  Connection Classification 
A)  SMTP delivery 
B)  SMTP firewall 
C)  SMTP session 
D)  Connection Classification

Question 13

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

Accepted Answer

A)  Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected. 
B)  Modify the agent config.db to include the file 
C)  Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration 
D)  Modify the agent configuration and select the option "retain Original Files" 
A)  Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected. 
B)  Modify the agent config.db to include the file 
C)  Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration 
D)  Modify the agent configuration and select the option "retain Original Files"

Question 14

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers. What should the administrator do to make the Network Discover option available?

Accepted Answer

A)  Restart the Symantec DLP Controller service 
B)  Apply a new software license file from the Enforce console 
C)  Install a new Network Discover detection server 
D)  Restart the Vontu Monitor Service 
A)  Restart the Symantec DLP Controller service 
B)  Apply a new software license file from the Enforce console 
C)  Install a new Network Discover detection server 
D)  Restart the Vontu Monitor Service

Question 15

Symantec Messaging Gateway 10.5 is running out of disk space due to storing extended logs. The administrator is required to store extended log data for more than a year. Which action should the administrator take?

Accepted Answer

A)  lower the maximum log storage limit 
B)  deploy Control Center on virtual appliance and add more disk space 
C)  configure remote logging 
D)  add higher capacity disks to appliance RAID array 
A)  lower the maximum log storage limit 
B)  deploy Control Center on virtual appliance and add more disk space 
C)  configure remote logging 
D)  add higher capacity disks to appliance RAID array

Question 16

What are two benefits of customer-specific spam rules? (Select two.)

Accepted Answer

A)  provides a wizard style tool enabling administrators to create rules against spam 
B)  provides a mechanism to quickly block local or targeted attacks 
C)  enables the administrator to report spammers to Symantec Global Intelligence Network 
D)  adds the IP of selected spammers to the lowest bucket in the Connection Throttling module 
E)  provide fast protection against messages Symantec may not define as spam 
A)  provides a wizard style tool enabling administrators to create rules against spam 
B)  provides a mechanism to quickly block local or targeted attacks 
C)  enables the administrator to report spammers to Symantec Global Intelligence Network 
D)  adds the IP of selected spammers to the lowest bucket in the Connection Throttling module 
E)  provide fast protection against messages Symantec may not define as spam

Question 17

Where are options for backup and restore of Symantec Messaging Gateway 10.5 located?

Accepted Answer

A)  Administration -> Version 
B)  Administration -> Utilities 
C)  Administration -> Restore/Download 
D)  Administration -> Updates 
A)  Administration -> Version 
B)  Administration -> Utilities 
C)  Administration -> Restore/Download 
D)  Administration -> Updates

Question 18

Which two detection technology options ONLY run on a detection server? (Choose two.)

Accepted Answer

A)  Form Recognition 
B)  Indexed Document Matching (IDM) 
C)  Described Content Matching (DCM) 
D)  Exact Data Matching (EDM) 
E)  Vector Machine Learning (VML) 
A)  Form Recognition 
B)  Indexed Document Matching (IDM) 
C)  Described Content Matching (DCM) 
D)  Exact Data Matching (EDM) 
E)  Vector Machine Learning (VML)

Where should an administrator set the debug levels for an Endpoint Agent?

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?

Which logs will help an administrator determine why antispam rules have failed to update?

Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?

Which URL must be accessed to successfully register a newly added Symantec Messaging Gateway 10.5 license file?

Why would an administrator set the Similarity Threshold to zero when testing and tuning a Vector Machine Learning (VML) profile?

Which detection method depends on "training sets"?

What are two benefits of using attachment list policy resources in Symantec Messaging Gateway 10.5? (Select two.)

What is the default action taken during an email virus attack?

A Symantec Messaging Gateway 10.5 administrator needs to prevent bounce attacks. Where should the administrator enable this feature?

Which two detection servers are available as virtual appliances? (Choose two.)

During which phase of inbound message flow does Symantec Messaging Gateway 10.5 accept, reject, or defer messages on the basis of the message envelope?

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers. What should the administrator do to make the Network Discover option available?

Symantec Messaging Gateway 10.5 is running out of disk space due to storing extended logs. The administrator is required to store extended log data for more than a year. Which action should the administrator take?

What are two benefits of customer-specific spam rules? (Select two.)

Where are options for backup and restore of Symantec Messaging Gateway 10.5 located?

Which two detection technology options ONLY run on a detection server? (Choose two.)

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec Data Loss Prevention 12 (Broadcom)

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters

Exam 4: Administration of Symantec ProxySG 6.7

Where should an administrator set the debug levels for an Endpoint Agent?

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?

Which logs will help an administrator determine why antispam rules have failed to update?

Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?

Which URL must be accessed to successfully register a newly added Symantec Messaging Gateway 10.5 license file?

Why would an administrator set the Similarity Threshold to zero when testing and tuning a Vector Machine Learning (VML) profile?

Which detection method depends on "training sets"?

What are two benefits of using attachment list policy resources in Symantec Messaging Gateway 10.5? (Select two.)

What is the default action taken during an email virus attack?

A Symantec Messaging Gateway 10.5 administrator needs to prevent bounce attacks. Where should the administrator enable this feature?

Which two detection servers are available as virtual appliances? (Choose two.)

During which phase of inbound message flow does Symantec Messaging Gateway 10.5 accept, reject, or defer messages on the basis of the message envelope?

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers. What should the administrator do to make the Network Discover option available?

Symantec Messaging Gateway 10.5 is running out of disk space due to storing extended logs. The administrator is required to store extended log data for more than a year. Which action should the administrator take?

What are two benefits of customer-specific spam rules? (Select two.)

Where are options for backup and restore of Symantec Messaging Gateway 10.5 located?

Which two detection technology options ONLY run on a detection server? (Choose two.)

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec Data Loss Prevention 12 (Broadcom)

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters