显示标签为“250-530”的博文。显示所有博文
显示标签为“250-530”的博文。显示所有博文

2013年12月29日星期日

Latest training guide for Symantec 250-530

Our IT-Tests.com is a professional website to provide accurate exam material for a variety of IT certification exams. And IT-Tests.com can help many IT professionals enhance their career goals. The strength of our the IT elite team will make you feel incredible. You can try to free download part of the exam questions and answers about Symantec certification 250-530 exam to measure the reliability of our IT-Tests.

The site of IT-Tests.com is well-known on a global scale. Because the training materials it provides to the IT industry have no-limited applicability. This is the achievement made by IT experts in IT-Tests.com after a long period of time. They used their knowledge and experience as well as the ever-changing IT industry to produce the material. The effect of IT-Tests.com's Symantec 250-530 exam training materials is reflected particularly good by the use of the many candidates. If you participate in the IT exam, you should not hesitate to choose IT-Tests.com's Symantec 250-530 exam training materials. After you use, you will know that it is really good.

Exam Code: 250-530
Exam Name: Symantec (Administration of Symantec Network Access Control 12.1 )
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Total Q&A: 110 Questions and Answers
Last Update: 2013-12-29

About 250-530 exam, IT-Tests.com has a great sound quality, will be the most trusted sources. Feedback from the thousands of registration department, a large number of in-depth analysis, we are in a position to determine which supplier will provide you with the latest and the best 250-530 practice questions. The IT-Tests.com Symantec 250-530 training materials are constantly being updated and modified, has the highest Symantec 250-530 training experience. If you want to pass the exam,please using our IT-Tests.com Symantec 250-530 exam training materials. IT-Tests.com Symantec 250-530 Add to your shopping cart, it will let you see unexpected results.

In the era of rapid development in the IT industry, we have to look at those IT people with new eyes. They use their high-end technology to create many convenient place for us. And save a lot of manpower and material resources for the state and enterprises. And even reached unimaginable effect. Of course, their income must be very high. Do you want to be the kind of person? Do you envy them? Or you are also IT person, but you do not get this kind of success. Do not worry, IT-Tests.com's Symantec 250-530 exam material can help you to get what you want. To select IT-Tests.com is equivalent to choose a success.

IT-Tests.com Symantec 250-530 exam training materials have the best price value. Compared to many others training materials, IT-Tests.com's Symantec 250-530 exam training materials are the best. If you need IT exam training materials, if you do not choose IT-Tests.com's Symantec 250-530 exam training materials, you will regret forever. Select IT-Tests.com's Symantec 250-530 exam training materials, you will benefit from it last a lifetime.

250-530 (Administration of Symantec Network Access Control 12.1 ) Free Demo Download: http://www.it-tests.com/250-530.html

NO.1 Refer to the exhibit.
A Symantec Network Access Control administrator is trying to implement two Gateway Enforcers in
failover mode. The administrator has implemented the two Enforcers in the network as shown in the
exhibit. After starting both Gateway Enforcers, the administrator finds that both Enforcers are in active
mode. What is the likely cause of the problem?
A. The failover configuration is missing.
B. The router is blocking multicast traffic.
C. The administrator failed to configure the Enforcers in Symantec Endpoint Protection Manager.
D. The Gateway Enforcers are configured in the same Gateway Enforcer group.
Answer: B

Symantec   250-530 study guide   250-530 answers real questions   250-530   250-530 demo

NO.2 What are the correct connection settings for a serial connection?
A. Data Bits: 8; Parity: none; Stop Bits: 1
B. Data Bits: 8; Parity: odd; Stop Bits: 1
C. Data Bits: 8; Parity: even; Stop Bits: 1
D. Data Bits: 8; Parity: odd; Stop Bits: 2
Answer: D

Symantec   250-530   250-530   250-530

NO.3 At the Enforcer (debug)# prompt, which command enables the most detailed level of debugging?
A. level engineer
B. level verbose
C. level fine
D. level error
Answer: A

Symantec   250-530 practice test   250-530 exam prep   250-530 exam simulations   250-530

NO.4 Refer to the exhibit.
An administrator needs a custom requirement to run a script if a file does not exist. Which modification to
the logic shown in the exhibit performs this functionality?
A. Add a nested AND/OR statement to run a script after the END IF.
B. Add a nested result to run a script after the Pass.
C. Use an OR modifier to run a script after the IF.
D. Use an ELSE statement to run a script after the THEN.
Answer: D

Symantec test questions   250-530   250-530

NO.5 Which check can be performed using custom requirements to verify whether "a product is installed" on
a client machine?
A. check the registry keys to see if the product is installed
B. check the service snap-in to see if the product is installed
C. check the policy document to see if the product is installed
D. check the IT documentation to see if the product is installed
Answer: D

Symantec braindump   250-530   250-530   250-530   250-530 exam dumps

NO.6 What should an administrator do to obtain additional information about Host Integrity checking for a
newly implemented Host Integrity policy?
A. Create a customized computer status report on the management server.
B. Enable the reporting of additional log events on the client systems.
C. Set verbose logging on the Host Integrity policy.
D. Enable debug logging on the enforcer.
Answer: C

Symantec   250-530   250-530 exam prep

NO.7 An organization has deployed Symantec Network Access Control with LAN Enforcer. Historically, all
clients were Windows based endpoints. Now, Linux endpoints that authenticate with Microsoft Active
Directory will need to be authenticated through the LAN Enforcer. Which entry needs to be added to the
Switch Profile Action table to open the port for Linux endpoints once they have been authenticated
through Active Directory user credentials?
A. Host Authentication: Pass, User Authentication: Pass, Policy Check: Pass, Action: Open Port
B. Host Authentication: Fail, User Authentication: Fail, Policy Check: Ignore, Action: Close Port
C. Host Authentication: Unavailable, User Authentication:Pass, Policy Check: Unavailable, Action: Open
Port
D. Host Authentication: Pass, User Authentication: Unavailable, Policy Check: Unavailable, Action: Close
Port
Answer: C

Symantec   250-530   250-530   250-530

NO.8 How can access be permitted to remediation services when a client fails the Host Integrity check using
a Gateway Enforcer?
A. Add the client's IP address to the Trusted External IP Address List.
B. Add the client's MAC Address to the Mac Address Bypass table.
C. Add the IP addresses of the hosts to the Trusted Internal IP Address List.
D. Add the client to the Allowed Client table on the Enforcer.
Answer: C

Symantec certification   250-530   250-530 exam prep   250-530

NO.9 Which log contains IP address, connection attempt, port information, and the direction of the
connection?
A. Enforcer Client log
B. Enforcer Kernel log
C. Enforcer Traffic log
D. Enforcer Packet log
Answer: C

Symantec exam prep   250-530   250-530

NO.10 What is the default time interval for Host Integrity checks?
A. Continuous
B. 2 minutes
C. 5 minutes
D. 30 minutes
Answer: B

Symantec   250-530   250-530 certification

NO.11 How does Symantec Network Access Control handle location switching compared to Symantec
Endpoint Protection?
A. It uses a reverse logic structure.
B. It excludes locations.
C. It uses locations instead of groups.
D. It handles locations in the same way.
Answer: D

Symantec pdf   250-530   250-530   250-530

NO.12 When a Gateway Enforcer is being deployed, which port needs to be kept open between the clients
and the Enforcer?
A. TCP 1812
B. TCP 39999
C. UDP 39999
D. UDP 1812
Answer: C

Symantec   250-530 original questions   250-530 exam dumps   250-530 exam simulations

NO.13 A Host Integrity policy has a complex custom conditional check that has three IF THEN statements, two
of which have ELSE statements. How many ENDIF statements are required?
A. 0
B. 1
C. 3
D. 5
Answer: C

Symantec answers real questions   250-530   250-530 answers real questions

NO.14 The 802.1x protocol has three major components: Supplicant, Authenticator and Authentication Server.
Which elements serve each of these components when Symantec Network Access Control is being
configured to use LAN Enforcement?
A. Supplicant: Symantec Endpoint Protection Client,
Authenticator: Symantec LAN Enforcer,
Authentication Server: Microsoft Active Directory Domain Controller
B. Supplicant: Microsoft Supplicant,
Authenticator: 802.1x Enabled Switch,
Authentication Server: Symantec LAN Enforcer
C. Supplicant: Network Access Control Client,
Authenticator: Symantec Endpoint Protection Policy Manager,
Authentication Server: Symantec LAN Enforcer
D. Supplicant: Microsoft Supplicant,
Authenticator: Microsoft Active Directory Domain Controller,
Authentication Server: Symantec Endpoint Protection Manager
Answer: B

Symantec   250-530   250-530 exam   250-530 exam prep   250-530

NO.15 When would the Enforcer need to be reset to factory defaults?
A. to change the type of Enforcer
B. to upgrade the Enforcer
C. to purge any errors on the Enforcer
D. to purge all logs from the Enforcer
Answer: A

Symantec   250-530 exam   250-530   250-530 demo   250-530 braindump

NO.16 A Helpdesk technician is examining the logs for a particular client when he notices something odd. A
Host Integrity event is listed for a client as failing a requirement, but that client machine is still able to
access the network even after having the check rerun several times. Why would the client's Host Integrity
status still pass?
A. The requirement logic is malfunctioning and the Helpdesk technician should notify the administrator to
contact the vendor.
B. It is likely to be a problem with the recording of the status. The log search must be rerun to update the
status.
C. The administrator has configured that requirement to allow the Host Integrity policy to pass even if it
fails.
D. The administrator has configured the OS to ignore Host Integrity even when it fails.
Answer: D

Symantec test answers   250-530   250-530 practice test

NO.17 Refer to the exhibit.
An administrator has created a custom requirement to remediate an operating system patch. The custom
requirement appears to be working intermittently with clients that fail the patch installation, passing the
requirement anyway. What is the likely cause of the issue?
A. The logic is missing a Fail result.
B. The logic is missing an ELSE statement.
C. The logic has an extra Pass result.
D. The logic needs an additional IF/THEN item.
Answer: C

Symantec   250-530 exam dumps   250-530   250-530 braindump

NO.18 Which default port must a firewall administrator open to enable communication between an Enforcer
and the Symantec Endpoint Protection Manager?
A. 1433
B. 1812
C. 8443
D. 8080
Answer: B

Symantec   250-530 demo   250-530

NO.19 Which protocol is used to transfer packet captures from an Enforcer?
A. FTP
B. HTTP
C. TFTP
D. SFTP
Answer: C

Symantec   250-530   250-530   250-530

NO.20 On a LAN Enforcer, which command shows the switch action table decisions in real time?
A. show spm
B. show auth live
C. show kernel live
D. show action live
Answer: C

Symantec test questions   250-530   250-530 demo   250-530 exam prep

NO.21 Which packets are periodically sent from an Enforcer to find other Enforcers on the network?
A. Failover
B. Discover
C. ARP
D. OSPF
Answer: A

Symantec   250-530 exam simulations   250-530

NO.22 An organization with a Gateway Enforcer behind a VPN concentrator that is performing NAT,
determines that clients are being blocked. What is the most likely cause of the problem?
A. The client is missing from the MAC Address Bypass list.
B. The IP address of the internal interface of the VPN connector needs to be added to the Trusted
External IP Address list.
C. The Enforcer is placed in the wrong physical location on the network.
D. Static routes need to be added to the Symantec Endpoint Protection Manager to pass the client traffic.
Answer: B

Symantec exam simulations   250-530 test   250-530 certification training

NO.23 Which statement is true about Symantec Network Access Control compliance?
A. It ensures that endpoints, such as clients and servers, meet specific administrator-defined
requirements.
B. It ensures the management of a secure client endpoint through the creation and implementation of
group policies.
C. It provides services needed by a client to bring itself up to spec in order to gain access to network
resources.
D. It provides clients with the ability to configure and deliver content and product updates to other clients
in the same topological location.
Answer: B

Symantec   250-530 test   250-530   250-530 exam prep   250-530

NO.24 Which two are explanations of why auto-location switching may be useful for Host Integrity? (Select
two.)
A. It can define different Remediation sources, based on location.
B. It can enable different Antivirus features, based on location.
C. It can choose different Firewall rule sets, based on location.
D. It can select different Host Integrity checks, based on location
E. It can enable different LiveUpdate features, based on location.
Answer: A,D

Symantec   250-530 answers real questions   250-530 test questions   250-530 exam simulations   250-530 pdf   250-530

NO.25 An organization's security policy requires Host Integrity checks to run only when the client is
connecting through a VPN concentrator whose internal interface is attached to a Gateway Enforcer.
Which setting should be configured to only check Host Integrity on these external clients, but not check
clients on the local network?
A. Apply the Host Integrity agent to the external computers only.
B. Add the IP addresses of the internal clients that need not be checked to the "Trusted Internal IP
Address Range".
C. Select "Only do Host-Integrity checking through the Gateway or DHCP Enforcer".
D. Block port UDP 39999 on the client firewalls of the internal clients, so that they cannot be challenged
by the Enforcer.
Answer: C

Symantec   250-530 test   250-530   250-530 braindump   250-530

NO.26 How can an administrator provide computers on a quarantine VLAN with access to remediation
materials without using static routes?
A. Assign a virtual IP address to the NIC on the remediation server and add it to the quarantine VLAN.
B. Create a static route from the quarantine VLAN to the Symantec Endpoint Protection Manager in the
Enforcer command line interface.
C. Multi-home the remediation server and connect one NIC to a port assigned to the quarantine VLAN.
D. Put a wireless access point on the quarantine VLAN to provide wireless access to quarantined clients.
Answer: C

Symantec study guide   250-530 test answers   250-530   250-530

NO.27 Which two databases are supported when Symantec Endpoint Protection Manager is being configured?
(Select two.)
A. Oracle Database 11g
B. Microsoft SQL Server 2005, SP2
C. Microsoft SQL Express, SP1
D. Microsoft SQL Server 2008
E. MySQL Database 5.5
Answer: B,D

Symantec   250-530 test questions   250-530   250-530 certification training   250-530

NO.28 In an Enforcer command line interface, which filter is used to capture communication traffic between an
Enforcer and a Symantec Endpoint Protection Manager?
A. auth
B. client
C. query
D. spm
Answer: D

Symantec certification training   250-530   250-530   250-530   250-530 dumps

NO.29 What will happen if a user switches to a location with a different Host Integrity policy while a Host
Integrity check is in progress?
A. The Host Integrity check will fail and the client will be denied network access.
B. The client will stop the check and the user may get a timeout if attempting to reach remediation
resources.
C. The client is permitted guest access to the quarantine network until the next scheduled Host Integrity
check.
D. The Host Integrity check always completes prior to moving between locations.
Answer: B

Symantec answers real questions   250-530 test answers   250-530   250-530   250-530   250-530

NO.30 A guest is unable to download the On-Demand client. The guest is running Windows 7 64-bit and
connecting with the Mozilla Firefox browser. The computer has 512 MB RAM and 50 MB free disk space.
What is the likely cause of the problem?
A. The guest's system has insufficient disk space.
B. The guest's browser is unsupported.
C. The guest's operating system is unsupported.
D. The guest's system has insufficient RAM.
Answer: A

Symantec exam dumps   250-530 test   250-530   250-530 demo

IT-Tests.com offer the latest LOT-951 Questions & Answers and high-quality 000-156 PDF Practice Test. Our 156-215.13 VCE testing engine and HP0-S34 study guide can help you pass the real exam. High-quality 00M-663 Real Exam Questions can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.it-tests.com/250-530.html

2013年9月14日星期六

Symantec 250-530 study guide

No one wants to own insipid life. Do you want to at the negligible postion and share less wages forever? And do you want to wait to be laid off or waiting for the retirement? This life is too boring. Do not you want to make your life more interesting? It does not matter. Today, I tell you a shortcut to success. It is to pass the Symantec 250-530 exam. With this certification, you can live the life of the high-level white-collar. You can become a power IT professionals, and get the respect from others. IT-Tests.com will provide you with excellent Symantec 250-530 exam training materials, and allows you to achieve this dream effortlessly. Are you still hesitant? Do not hesitate, Add the IT-Tests.com's Symantec 250-530 exam training materials to your shopping cart quickly.

About Symantec 250-530 exam, each candidate is very confused. Everyone has their own different ideas. But the same idea is that this is a very difficult exam. We are all aware of Symantec 250-530 exam is a difficult exam. But as long as we believe IT-Tests.com, this will not be a problem. IT-Tests.com's Symantec 250-530 exam training materials is an essential product for each candidate. It is tailor-made for the candidates who will participate in the exam. You will absolutely pass the exam. If you do not believe, then take a look into the website of IT-Tests.com. You will be surprised, because its daily purchase rate is the highest. Do not miss it, and add to your shoppingcart quickly.

IT-Tests.com is a website for Symantec certification 250-530 exam to provide a short-term effective training. Symantec 250-530 is a certification exam which is able to change your life. IT professionals who gain Symantec 250-530 authentication certificate must have a higher salary than the ones who do not have the certificate and their position rising space is also very big, who will have a widely career development prospects in the IT industry in.

Now there are many IT professionals in the world and the competition of IT industry is very fierce. So many IT professionals will choose to participate in the IT certification exam to improve their position in the IT industry. 250-530 exam is a very important Symantec's certification exam. But if you want to get a Symantec certification, you must pass the exam.

Exam Code: 250-530
Exam Name: Symantec (Administration of Symantec Network Access Control 12.1 )
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Total Q&A: 110 Questions and Answers
Last Update: 2013-09-14

When you try our part of Symantec certification 250-530 exam practice questions and answers, you can make a choice to our IT-Tests. We will be 100% providing you convenience and guarantee. Remember that making you 100% pass Symantec certification 250-530 exam is IT-Tests.

250-530 (Administration of Symantec Network Access Control 12.1 ) Free Demo Download: http://www.it-tests.com/250-530.html

NO.1 What are the correct connection settings for a serial connection?
A. Data Bits: 8; Parity: none; Stop Bits: 1
B. Data Bits: 8; Parity: odd; Stop Bits: 1
C. Data Bits: 8; Parity: even; Stop Bits: 1
D. Data Bits: 8; Parity: odd; Stop Bits: 2
Answer: D

Symantec   250-530   250-530   250-530 exam dumps   250-530

NO.2 Which packets are periodically sent from an Enforcer to find other Enforcers on the network?
A. Failover
B. Discover
C. ARP
D. OSPF
Answer: A

Symantec study guide   250-530 study guide   250-530   250-530   250-530 answers real questions   250-530

NO.3 In an Enforcer command line interface, which filter is used to capture communication traffic between an
Enforcer and a Symantec Endpoint Protection Manager?
A. auth
B. client
C. query
D. spm
Answer: D

Symantec test answers   250-530   250-530

NO.4 How can an administrator provide computers on a quarantine VLAN with access to remediation
materials without using static routes?
A. Assign a virtual IP address to the NIC on the remediation server and add it to the quarantine VLAN.
B. Create a static route from the quarantine VLAN to the Symantec Endpoint Protection Manager in the
Enforcer command line interface.
C. Multi-home the remediation server and connect one NIC to a port assigned to the quarantine VLAN.
D. Put a wireless access point on the quarantine VLAN to provide wireless access to quarantined clients.
Answer: C

Symantec   250-530   250-530 braindump   250-530 exam prep   250-530

NO.5 An organization with a Gateway Enforcer behind a VPN concentrator that is performing NAT,
determines that clients are being blocked. What is the most likely cause of the problem?
A. The client is missing from the MAC Address Bypass list.
B. The IP address of the internal interface of the VPN connector needs to be added to the Trusted
External IP Address list.
C. The Enforcer is placed in the wrong physical location on the network.
D. Static routes need to be added to the Symantec Endpoint Protection Manager to pass the client traffic.
Answer: B

Symantec test answers   250-530 questions   250-530 pdf   250-530 answers real questions

NO.6 At the Enforcer (debug)# prompt, which command enables the most detailed level of debugging?
A. level engineer
B. level verbose
C. level fine
D. level error
Answer: A

Symantec   250-530   250-530   250-530

NO.7 Which protocol is used to transfer packet captures from an Enforcer?
A. FTP
B. HTTP
C. TFTP
D. SFTP
Answer: C

Symantec   250-530   250-530   250-530   250-530   250-530 test

NO.8 What will happen if a user switches to a location with a different Host Integrity policy while a Host
Integrity check is in progress?
A. The Host Integrity check will fail and the client will be denied network access.
B. The client will stop the check and the user may get a timeout if attempting to reach remediation
resources.
C. The client is permitted guest access to the quarantine network until the next scheduled Host Integrity
check.
D. The Host Integrity check always completes prior to moving between locations.
Answer: B

Symantec dumps   250-530   250-530 test   250-530 answers real questions

NO.9 A guest is unable to download the On-Demand client. The guest is running Windows 7 64-bit and
connecting with the Mozilla Firefox browser. The computer has 512 MB RAM and 50 MB free disk space.
What is the likely cause of the problem?
A. The guest's system has insufficient disk space.
B. The guest's browser is unsupported.
C. The guest's operating system is unsupported.
D. The guest's system has insufficient RAM.
Answer: A

Symantec   250-530   250-530 study guide   250-530 answers real questions   250-530

NO.10 An organization's security policy requires Host Integrity checks to run only when the client is
connecting through a VPN concentrator whose internal interface is attached to a Gateway Enforcer.
Which setting should be configured to only check Host Integrity on these external clients, but not check
clients on the local network?
A. Apply the Host Integrity agent to the external computers only.
B. Add the IP addresses of the internal clients that need not be checked to the "Trusted Internal IP
Address Range".
C. Select "Only do Host-Integrity checking through the Gateway or DHCP Enforcer".
D. Block port UDP 39999 on the client firewalls of the internal clients, so that they cannot be challenged
by the Enforcer.
Answer: C

Symantec   250-530   250-530 study guide

NO.11 How can access be permitted to remediation services when a client fails the Host Integrity check using
a Gateway Enforcer?
A. Add the client's IP address to the Trusted External IP Address List.
B. Add the client's MAC Address to the Mac Address Bypass table.
C. Add the IP addresses of the hosts to the Trusted Internal IP Address List.
D. Add the client to the Allowed Client table on the Enforcer.
Answer: C

Symantec   250-530 original questions   250-530   250-530   250-530 demo

NO.12 How does Symantec Network Access Control handle location switching compared to Symantec
Endpoint Protection?
A. It uses a reverse logic structure.
B. It excludes locations.
C. It uses locations instead of groups.
D. It handles locations in the same way.
Answer: D

Symantec study guide   250-530 test questions   250-530

NO.13 A Host Integrity policy has a complex custom conditional check that has three IF THEN statements, two
of which have ELSE statements. How many ENDIF statements are required?
A. 0
B. 1
C. 3
D. 5
Answer: C

Symantec   250-530   250-530 test answers   250-530

NO.14 Refer to the exhibit.
An administrator has created a custom requirement to remediate an operating system patch. The custom
requirement appears to be working intermittently with clients that fail the patch installation, passing the
requirement anyway. What is the likely cause of the issue?
A. The logic is missing a Fail result.
B. The logic is missing an ELSE statement.
C. The logic has an extra Pass result.
D. The logic needs an additional IF/THEN item.
Answer: C

Symantec braindump   250-530   250-530 test   250-530

NO.15 Refer to the exhibit.
A Symantec Network Access Control administrator is trying to implement two Gateway Enforcers in
failover mode. The administrator has implemented the two Enforcers in the network as shown in the
exhibit. After starting both Gateway Enforcers, the administrator finds that both Enforcers are in active
mode. What is the likely cause of the problem?
A. The failover configuration is missing.
B. The router is blocking multicast traffic.
C. The administrator failed to configure the Enforcers in Symantec Endpoint Protection Manager.
D. The Gateway Enforcers are configured in the same Gateway Enforcer group.
Answer: B

Symantec   250-530 exam prep   250-530 dumps

NO.16 Which check can be performed using custom requirements to verify whether "a product is installed" on
a client machine?
A. check the registry keys to see if the product is installed
B. check the service snap-in to see if the product is installed
C. check the policy document to see if the product is installed
D. check the IT documentation to see if the product is installed
Answer: D

Symantec   250-530 exam simulations   250-530 study guide   250-530

NO.17 An organization has deployed Symantec Network Access Control with LAN Enforcer. Historically, all
clients were Windows based endpoints. Now, Linux endpoints that authenticate with Microsoft Active
Directory will need to be authenticated through the LAN Enforcer. Which entry needs to be added to the
Switch Profile Action table to open the port for Linux endpoints once they have been authenticated
through Active Directory user credentials?
A. Host Authentication: Pass, User Authentication: Pass, Policy Check: Pass, Action: Open Port
B. Host Authentication: Fail, User Authentication: Fail, Policy Check: Ignore, Action: Close Port
C. Host Authentication: Unavailable, User Authentication:Pass, Policy Check: Unavailable, Action: Open
Port
D. Host Authentication: Pass, User Authentication: Unavailable, Policy Check: Unavailable, Action: Close
Port
Answer: C

Symantec answers real questions   250-530   250-530   250-530 exam prep   250-530 certification

NO.18 What is the default time interval for Host Integrity checks?
A. Continuous
B. 2 minutes
C. 5 minutes
D. 30 minutes
Answer: B

Symantec   250-530 exam simulations   250-530 dumps   250-530

NO.19 Which statement is true about Symantec Network Access Control compliance?
A. It ensures that endpoints, such as clients and servers, meet specific administrator-defined
requirements.
B. It ensures the management of a secure client endpoint through the creation and implementation of
group policies.
C. It provides services needed by a client to bring itself up to spec in order to gain access to network
resources.
D. It provides clients with the ability to configure and deliver content and product updates to other clients
in the same topological location.
Answer: B

Symantec demo   250-530 pdf   250-530   250-530 exam   250-530

NO.20 Which two databases are supported when Symantec Endpoint Protection Manager is being configured?
(Select two.)
A. Oracle Database 11g
B. Microsoft SQL Server 2005, SP2
C. Microsoft SQL Express, SP1
D. Microsoft SQL Server 2008
E. MySQL Database 5.5
Answer: B,D

Symantec   250-530   250-530   250-530

NO.21 Refer to the exhibit.
An administrator needs a custom requirement to run a script if a file does not exist. Which modification to
the logic shown in the exhibit performs this functionality?
A. Add a nested AND/OR statement to run a script after the END IF.
B. Add a nested result to run a script after the Pass.
C. Use an OR modifier to run a script after the IF.
D. Use an ELSE statement to run a script after the THEN.
Answer: D

Symantec   250-530 exam simulations   250-530 dumps   250-530

NO.22 On a LAN Enforcer, which command shows the switch action table decisions in real time?
A. show spm
B. show auth live
C. show kernel live
D. show action live
Answer: C

Symantec   250-530   250-530   250-530 original questions

NO.23 When would the Enforcer need to be reset to factory defaults?
A. to change the type of Enforcer
B. to upgrade the Enforcer
C. to purge any errors on the Enforcer
D. to purge all logs from the Enforcer
Answer: A

Symantec exam prep   250-530   250-530 answers real questions   250-530 answers real questions   250-530   250-530

NO.24 Which log contains IP address, connection attempt, port information, and the direction of the
connection?
A. Enforcer Client log
B. Enforcer Kernel log
C. Enforcer Traffic log
D. Enforcer Packet log
Answer: C

Symantec   250-530   250-530 test   250-530 answers real questions

NO.25 Which default port must a firewall administrator open to enable communication between an Enforcer
and the Symantec Endpoint Protection Manager?
A. 1433
B. 1812
C. 8443
D. 8080
Answer: B

Symantec   250-530 exam simulations   250-530 answers real questions   250-530 test answers   250-530 exam prep

NO.26 When a Gateway Enforcer is being deployed, which port needs to be kept open between the clients
and the Enforcer?
A. TCP 1812
B. TCP 39999
C. UDP 39999
D. UDP 1812
Answer: C

Symantec   250-530 questions   250-530 braindump   250-530 answers real questions

NO.27 The 802.1x protocol has three major components: Supplicant, Authenticator and Authentication Server.
Which elements serve each of these components when Symantec Network Access Control is being
configured to use LAN Enforcement?
A. Supplicant: Symantec Endpoint Protection Client,
Authenticator: Symantec LAN Enforcer,
Authentication Server: Microsoft Active Directory Domain Controller
B. Supplicant: Microsoft Supplicant,
Authenticator: 802.1x Enabled Switch,
Authentication Server: Symantec LAN Enforcer
C. Supplicant: Network Access Control Client,
Authenticator: Symantec Endpoint Protection Policy Manager,
Authentication Server: Symantec LAN Enforcer
D. Supplicant: Microsoft Supplicant,
Authenticator: Microsoft Active Directory Domain Controller,
Authentication Server: Symantec Endpoint Protection Manager
Answer: B

Symantec   250-530 exam prep   250-530

NO.28 What should an administrator do to obtain additional information about Host Integrity checking for a
newly implemented Host Integrity policy?
A. Create a customized computer status report on the management server.
B. Enable the reporting of additional log events on the client systems.
C. Set verbose logging on the Host Integrity policy.
D. Enable debug logging on the enforcer.
Answer: C

Symantec   250-530   250-530

NO.29 A Helpdesk technician is examining the logs for a particular client when he notices something odd. A
Host Integrity event is listed for a client as failing a requirement, but that client machine is still able to
access the network even after having the check rerun several times. Why would the client's Host Integrity
status still pass?
A. The requirement logic is malfunctioning and the Helpdesk technician should notify the administrator to
contact the vendor.
B. It is likely to be a problem with the recording of the status. The log search must be rerun to update the
status.
C. The administrator has configured that requirement to allow the Host Integrity policy to pass even if it
fails.
D. The administrator has configured the OS to ignore Host Integrity even when it fails.
Answer: D

Symantec   250-530 dumps   250-530   250-530 exam prep   250-530   250-530 answers real questions

NO.30 Which two are explanations of why auto-location switching may be useful for Host Integrity? (Select
two.)
A. It can define different Remediation sources, based on location.
B. It can enable different Antivirus features, based on location.
C. It can choose different Firewall rule sets, based on location.
D. It can select different Host Integrity checks, based on location
E. It can enable different LiveUpdate features, based on location.
Answer: A,D

Symantec original questions   250-530 pdf   250-530   250-530

IT-Tests.com offer the latest 70-489 Questions & Answers and high-quality BCP-340 PDF Practice Test. Our DC0-260 VCE testing engine and 70-460 study guide can help you pass the real exam. High-quality MB3-700 Real Exam Questions can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.it-tests.com/250-530.html

2013年8月18日星期日

Latest training guide for Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153

Our IT-Tests.com have a lot of IT professionals and the exam practice questions and answers we provide have been certified by many IT elites. Besides, the exam practice questions and answers have wide coverage of the content of the examination and the correct rate is up to 100%. Although there are many similar websites, perhaps they can provide you study guide and online services, our IT-Tests.com is leading these many websites. The reason of making the IT-Tests.com stand out in so many peers is that we have a lot of timely updated practice questions and answers which accurately and correctly hit the exam. So we can well improve the exam pass rate and make the people ready to participate in Symantec certification ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam safely use practice questions and answers provided by IT-Tests.com to pass the exam. IT-Tests.com 100% guarantee you to pass Symantec certification ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam.


Feedbacks of many IT professionals who have passed Symantec certification ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam prove that their successes benefit from IT-Tests's help. IT-Tests's targeted test practice questions and answers to gave them great help, which save their valuable time and energy, and allow them to easily and smoothly pass their first Symantec certification ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam. So IT-Tests.com a website worthy of your trust. Please select IT-Tests, you will be the next successful IT person. IT-Tests.com will help you achieve your dream.


Exam Code: ST0-147

Exam Name: Symantec (Veritas Cluster Server 6.0 for Unix Technical Assessment )

Exam Code: ST0-135

Exam Name: Symantec (Symantec Network Access Control 12.1 Technical Assessment )

Exam Code: 250-530

Exam Name: Symantec (Administration of Symantec Network Access Control 12.1 )

Exam Code: ST0-085

Exam Name: Symantec (Symantec Security Information Manager 4.7 Technical Assessment)

Exam Code: ST0-153

Exam Name: Symantec (Symantec PGP Universal Server 3.2 Technical Assessment)

IT-Tests.com's Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam training materials is the best training materials. If you are an IT staff, it will be your indispensable training materials. Do not take your future betting on tomorrow. IT-Tests.com's Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam training materials are absolutely trustworthy. We are dedicated to provide the materials to the world of the candidates who want to participate in IT exam. To get the Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam certification is the goal of many IT people & Network professionals. The pass rate of IT-Tests.com is incredibly high. We are committed to your success.


If you use the IT-Tests.com Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 study materials, you can reduce the time and economic costs of the exam. It can help you to pass the exam successfully. Before you decide to buy our Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam materials, you can download our free test questions, including the PDF version and the software version. If you need software versions please do not hesitate to obtain a copy from our customer service staff.


In order to protect the vital interests of each IT certification exams candidate, IT-Tests.com provides high-quality Symantec ST0-147 ST0-135 250-530 ST0-085 ST0-153 exam training materials. This exam material is specially developed according to the needs of the candidates. It is researched by the IT experts of IT-Tests.com. Their struggle is not just to help you pass the exam, but also in order to let you have a better tomorrow.


ST0-085 (Symantec Security Information Manager 4.7 Technical Assessment) Free Demo Download: http://www.it-tests.com/ST0-085.html


NO.1 What does the Correlation Engine analyze events against once all rules are properly defined?
A.the rule criteria, create triggers, and correlate conclusions into incidents
B.false positives, create conclusions, and correlate conclusions into incidents
C.the rule criteria, create conclusions, and correlate conclusions into incidents
D.the rule criteria, create conclusions, and send conclusions to the database
Answer: C

Symantec exam prep   ST0-085 exam dumps   ST0-085 original questions   ST0-085   ST0-085 pdf

NO.2 What information is necessary to properly size a deployment?
A.hard drive space, events per second and geographic locations
B.events per second,collector types and incident-to-event ratio
C.hard drive space, incidents per second and collector types
D.events per second, geographic locations and event-to-incident ratio
Answer: D

Symantec questions   ST0-085   ST0-085 practice test

NO.3 What are the specified minimum hardware requirements for installing and running the Symantec
Security Information Manager Console?
A.1 GB RAM and 1 GB disk space
B.1 GB RAM and 512 MB disk space
C.512 MB RAM and 1 GB disk space
D.512 MB RAM and 103 MB disk space
Answer: D

Symantec exam   ST0-085   ST0-085 exam simulations   ST0-085 demo   ST0-085

NO.4 Which component escalates security events into incidents?
A.rules
B.events
C.incidents
D.tickets
Answer: A

Symantec   ST0-085   ST0-085   ST0-085   ST0-085 exam simulations

NO.5 What are the hard drive specifications for the hardware?
A.6 drives (2 mirrored and 4 in RAID 5)
B.6 drives (2 mirrored and 4 in RAID 10)
C.6 drives (RAID 5)
D.2 drives (mirrored)
Answer: A

Symantec   ST0-085 certification training   ST0-085 exam   ST0-085   ST0-085

NO.6 Which database houses incidents and summary data?
A.Oracle
B.MySQL
C.MSSQL
D.IBM DB2
Answer: C

Symantec   ST0-085   ST0-085

NO.7 Which of the following vendor hardware is recommended to use with Symantec Security Information
Manager (SSIM)?
A.IBM
B.NEC
C.Dell
D.Hitachi
Answer: C

Symantec demo   ST0-085 answers real questions   ST0-085   ST0-085

NO.8 Which of the following are all on-box collectors?
A.PIX, UNIX Syslog and Data Leakage Prevention
B.Checkpoint, Snort and PIX
C.PIX, Snort and Symantec Web Gateway
D.Checkpoint, UNIX Syslog and Control Compliance Suite
Answer: B

Symantec   ST0-085 exam dumps   ST0-085 exam prep

NO.9 Which third-party software components support LDAP for users, roles, and configurations?
A.IBM Directory Server
B.Microsoft Active Directory Server
C.IBM DB2 8.1
D.IBM DB2 8.2
Answer: A

Symantec   ST0-085 test questions   ST0-085

NO.10 What information must be obtained prior to product deployment and configuration of the Symantec
Security Information Manager appliance?
A.which on-box collectors are appropriate for installation
B.the number of nodes found in the customer's infrastructure
C.the number of security events per day the appliance will handle
D.the air-conditioning and power requirements
Answer: A

Symantec   ST0-085   ST0-085 questions

NO.11 What is the purpose of the critical business assets management feature?
A.It enables automatic identification and prioritization of security threats that impact business-critical
applications.
B.It obtains an overview of business assets.
C.It makes it possible to change collectors' configurations to meet business assets needs.
D.It provides a visual picture of where critical business assets are located.
Answer: D

Symantec   ST0-085   ST0-085 braindump   ST0-085   ST0-085

NO.12 On which two operating systems can the Symantec Security Information Manager Agent be installed?
(Select two.)
A.Solaris 9
B.Windows 2000
C.Centos
D.IBM AIX 5
E.HP-UX 11
Answer: AB

Symantec dumps   ST0-085 dumps   ST0-085

NO.13 Symantec Security Information Manager Series Appliance installs which operating system by default?
A.Solaris
B.Windows
C.SUSE
D.Red Hat
Answer: D

Symantec   ST0-085 exam dumps   ST0-085

NO.14 Which OS listed does hardware used for the Symantec Security Information Manager (SSIM) image
support?
A.SUSE
B.Centos
C.Redhat
D.SE Linux
Answer: C

Symantec   ST0-085 test   ST0-085   ST0-085 exam simulations

NO.15 Which Symantec Security Information Manager component retrieves security content in near-realtime
from Symantec?
A.LiveUpdate
B.LiveUpdate and licensed DeepSight Integration Module simultaneously
C.Licensed DeepSight Integration Module
D.Security content retrieval is automatic.
Answer: C

Symantec pdf   ST0-085   ST0-085

NO.16 Where do Symantec Security Information Manager collectors send events?
A.Event Disposition
B.Event Archive
C.Event Reporting
D.Event Logger
Answer: D

Symantec exam dumps   ST0-085 demo   ST0-085

NO.17 Which component sends events to the Event Service for processing?
A.the Symantec Security Information Manager (SSIM) collector
B.the Symantec Security Information Manager (SSIM) on-box collector
C.the Symantec Security Information Manager (SSIM) off-box collector
D.the Symantec Security Information Manager (SSIM) agent
Answer: C

Symantec study guide   ST0-085 exam simulations   ST0-085   ST0-085 exam dumps   ST0-085 test questions

NO.18 What is Device-level aggregation?
A.parsing data with data sensors
B.grouping data to reduce traffic and database size
C.forwarding event data to the appliance
D.event and log sensoring
Answer: B

Symantec dumps   ST0-085   ST0-085   ST0-085

NO.19 Which tab on the Information Manager Console allows you to view threat and vulnerability information?
A.Rules
B.Dashboard
C.Reports
D.Intelligence
Answer: D

Symantec   ST0-085   ST0-085   ST0-085

NO.20 What is the difference between Symantec Security Information Manager (SSIM) on-box and off-box
collectors?
A.Off-box collectors are installed on the SSIM products and on-box collectors are installed on the
appliance.
B.On-box collectors are installed prior to SSIM software installation and off-box collectors are installed
separately.
C.On-box collectors are automatically installed with the SSIM software and off-box collectors are installed
separately.
D.Off-box collectors are installed on the appliance and on-box collectors are installed on assets.
Answer: C

Symantec   ST0-085 original questions   ST0-085 certification   ST0-085   ST0-085