Question 1

You are the administrator of Veritas Volume Manager in Veritas Storage Foundation environment. You want to remove a disk from a disk group. You execute the command vxdg -g dg01rmdisk d001. After executing the command, you are prompted with the error "VxVM vxdg ERROR V-5-552 disk diskname is used by one or more subdisks." You want to ensure you are able to remove the disk from the disk group. What should you do?

Accepted Answer

A)  Use -n option with vxdg command 
B)  Use -t option with vxdg command 
C)  Use -o option with vxdg command 
D)  Use -k option with vxdg command

Question 2

You are the administrator for the Veritas Volume Manger. You notice that the size of the disk group's configuration database in its private region is nearly full. You want to ensure that you do not loose any data from the disk group and are able to preserve the volume state. What should you do?

Accepted Answer

A)  Try to grow the private region 
B)  Spilt the disk groups 
C)  Move the disk group 
D)  Join the disk groups

Question 3

An administrator needs to create an image that can be used for a mass deployment in the company. Which Deployment Solution task should the administrator perform before creating the image?

Accepted Answer

A)  Run the Deploy Sysprep task before cloning 
B)  Run the Prepare for Image Capture task before cloning 
C)  Run SIDGen to prepare the image for deployment 
D)  Run the Capture Personality task before cloning

Question 4

An Incident Responder discovers an incident where all systems are infected with a file that has the same name and different hash. As a result, the organism view has multiple entries for the malicious file. What is causing this issue?

Accepted Answer

A)  This is a polymorphic threat 
B)  This is a DDoS attack 
C)  The file has multiple hashes 
D)  The file is trying to phone home

Question 5

You are performing a move operation under VxVM control. You cannot find the disk involved in a disk group. In addition, you get the following error message: "VxVM vxconfigd ERROR V-5-1-4551 dg_move_recover: can't locate disk(s), giving up" How should you resolve this error?

Accepted Answer

A)  Use vxdisk command to import a disk group. 
B)  Use vxdg command to clean the disk group to be imported. 
C)  Use vxassist command to clean the disk group to be imported. 
D)  Use vxconfigd command to import a disk group.

Question 6

An administrator is checking System Overview and all of the detection servers are showing as 'unknown'. The Vontu services are up and running on the detection servers. Thousands of .IDC files are building up in the Incidents directory on the detection servers. There is good network connectivity between the detection servers and the Enforce server when testing with the telnet command. How can the administrator bring the detection servers to a running state in the Enforce UI?

Accepted Answer

A)  delete all of the .BAD files in the incidents folder on the Enforce server 
B)  restart the Vontu Monitor Service on all of the detection servers affected 
C)  ensure the Vontu Monitor Controller service is running on the Enforce server 
D)  ensure port 8300 is configured as open on the firewall

Question 7

Where can an administrator locate the "Pen Number" for an email that has been quarantined by Anti-Malware?

Accepted Answer

A)  Pen Detail Report 
B)  Cynic Detail Report 
C)  Remediation Detail Report 
D)  Anti-Malware Detail Report

Question 8

Which agent policy contains settings to configure the alternate Notification Server URL, UNIX/Linux/Mac (ULM) settings, bandwidth throttling, and communication blockouts?

Accepted Answer

A)  Global Agent Settings policies 
B)  Agent Registration policies 
C)  Targeted Agent Settings policies 
D)  Maintenance Windows policies

Question 9

You are planning a relayout for a 10GB RAID-5 volume with a RAID-5 log to a stripe-mirror configuration. Dirty-region logging is indicated by the volume's size. How would your plan to address the logs?

Accepted Answer

A)  Remove the RAID-5 log and create a DRL prior to the relayout operation. 
B)  The RAID-5 log should be removed prior to the relayout and after the relayout completes, the DRL should be created separately. 
C)  Relayout will remove log plexes from the volume, but the DRL must be created after relayout is complete. 
D)  Use the "convertlogs" option of vxassist to cause the relayout job to convert the log plexes.

Question 10

Which process is acceptable for validating domain ownership within the "Add New Domain" wizard?

Accepted Answer

A)  Text message validation 
B)  DNS Validation with an added TXT Record 
C)  Email Security.cloud support ticket 
D)  DNS Validation with an added SPF Record

Question 11

A customer has information about a malicious file that has NOT entered the network. The customer wants to know whether ATP is already aware of this threat without having to introduce a copy of the file to the infrastructure. Which approach allows the customer to meet this need?

Accepted Answer

A)  Use the Cynic portal to check whether the MD5 hash triggers a detection from Cynic 
B)  Use the ATP console to check whether the SHA-256 hash triggers a detection from Cynic 
C)  Use the ATP console to check whether the MD5 hash triggers a detection from Cynic 
D)  Use the Cynic portal to check whether the SHA-256 hash triggers a detection from Cynic

Question 12

After installing Veritas Enterprise Administrator, you start the VEA with the profile name that you have specified. When you click the Console View, what does it display? (Select two.)

Accepted Answer

A)  Active Events 
B)  Volume Summary 
C)  Alerts 
D)  Disk History

Question 13

An Incident Responder needs to remediate a group of endpoints but also wants to copy a potentially suspicious file to the ATP file store. In which scenario should the Incident Responder copy a suspicious file to the ATP file store?

Accepted Answer

A)  The responder needs to analyze with Cynic 
B)  The responder needs to isolate it from the network 
C)  The responder needs to write firewall rules 
D)  The responder needs to add the file to a whitelist

Question 14

Which two steps must an Incident Responder take to isolate an infected computer in ATP? (Choose two.)

Accepted Answer

A)  Close any open shares 
B)  Identify the threat and understand how it spreads 
C)  Create subnets or VLANs and configure the network devices to restrict traffic 
D)  Set executables on network drives as read only 
E)  Identify affected clients

Question 15

Which installation package should an administrator use to install the Cloud-enabled Management services on an Internet-facing server?

Accepted Answer

A)  Internet Gateway Installation package 
B)  Symantec Installation Manager package 
C)  Task Server Agent plug-in package 
D)  Symantec Management Agent package

Question 16

Where can an administrator locate the "Pen Number" for an email quarantined by Anti-Malware?

Accepted Answer

A)  Administrator Quarantine 
B)  Track and Trace 
C)  Malware Release 
D)  End User Quarantine

Question 17

What does it mean if WebPulse returns a URL category of "Pending"? (Choose the best answer.)

Accepted Answer

A)  The URL has NOT been categorized by WebFilter 
B)  Background categorization is being performed in WebPulse 
C)  An exception is being sent to the client 
D)  The ProxySG waits before applying policy to the request

Question 18

Which Symantec product is best suited for simultaneously administering a large number of ProxySG appliances? (Choose the best answer.)

Accepted Answer

A)  PacketShaper 
B)  Reporter 
C)  Management Center 
D)  Content Analysis

Question 19

A volume called datavol in the disk group named datadg has two plexes. The plexes are named P1 and P2. Due to a series of failures, the P1 plex ends up in DISABLED/RECOVER state, and the P2 plex ends up in DISABLED/STALE state. As the administrator, you are aware of the series of failures, and you know that the data on the P1 plex is still valid and has the most recent copy of your data. You want to recover the plexes. Which command will you execute to recover the plexes?

Accepted Answer

A)  vxmend -g datadg fix stale P1 vxmend -g datadg fix clean P1 vxrecover -s datavol 
B)  vxmend -g datadg fix clean P1 vxrecover -s datavol 
C)  vxmend -g datadg fix clean P1 vxmend -g datadg fix clean P2 vxvol -g datadg start datavol 
D)  vxmend -g datadg off P2 vxrecover -ns vxvol -g datadg start datavol

Question 20

What are the components of a Notification Server report?

Accepted Answer

A)  Data source, field, grid, and results 
B)  Data source, views, parameters, and drilldowns 
C)  Object, field, query, and results 
D)  Views, chart, grid, and drilldowns

Exam 5: Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)