250-315 exam study guide

ITCertKing website is fully equipped with resources and the questions of Symantec 250-315 exam, it also includes the Symantec 250-315 exam practice test. Which can help candidates prepare for the exam and pass the exam. You can download the part of the trial exam questions and answers as a try. ITCertKing provide true and comprehensive exam questions and answers. With our exclusive online Symantec 250-315 exam training materials, you'll easily through Symantec 250-315 exam. Our site ensure 100% pass rate.

When you select to use ITCertKing's products, you have set the first foot on the peak of the IT industry and the way to your dream is one step closer. The practice questions of ITCertKing can not only help you pass Symantec certification 250-315 exam and consolidate your professional knowledge, but also provide you one year free update service.

A lot of my friends from IT industry in order to pass Symantec certification 250-315 exam have spend a lot of time and effort, but they did not choose training courses or online training, so passing the exam is so difficult for them and generally, the disposable passing rate is very low. Fortunately, ITCertKing can provide you the most reliable training tool for you. ITCertKing provide training resource that include simulation test software, simulation test, practice questions and answers about Symantec certification 250-315 exam. We can provide the best and latest practice questions and answers of Symantec certification 250-315 exam to meet your need.

Now passing Symantec certification 250-315 exam is not easy, so choosing a good training tool is a guarantee of success. ITCertKing will be the first time to provide you with exam information and exam practice questions and answers to let you be fully prepared to ensure 100% to pass Symantec certification 250-315 exam. ITCertKing can not only allow you for the first time to participate in the Symantec certification 250-315 exam to pass it successfully, but also help you save a lot of valuable time.

As a main supplier for IT certification exam training. ITCertKing's IT experts continually provide you the high quality product and a free online customer service, but also update the exam outline with the fastest speed.

Add ITCertKing's products to cart now! You will have 100% confidence to participate in the exam and disposably pass Symantec certification 250-315 exam. At last, you will not regret your choice.

The curtain of life stage may be opened at any time, the key is that you are willing to show, or choose to avoid. Most of People who can seize the opportunityin front of them are successful. So you have to seize this opportunity of ITCertKing. Only with it can you show your skills. ITCertKing Symantec 250-315 exam training materials is the most effective way to pass the certification exam. With this certification, you will achieve your dreams, and become successful.

Exam Code: 250-315
Exam Name: Symantec (Administration of Symantec Endpoint Protection 12.1)
One year free update, No help, Full refund!
Total Q&A: 167 Questions and Answers
Last Update: 2013-12-07

250-315 Free Demo Download: http://www.itcertking.com/250-315_exam.html

NO.1 Which Symantec Endpoint Protection 12.1 component provides services to improve the performance
of virtual client scanning?
A. Shared Insight Cache server
B. LiveUpdate Administrator server
C. Symantec Protection Center
D. Group Update Provider
Answer: A

Symantec exam prep   250-315   250-315   250-315

NO.2 In addition to performance improvements, which two benefits does Insight provide? (Select two.)
A. reputation scoring for documents
B. zero-day threat detection
C. protection against system file modifications
D. false positive mitigation
E. blocking of malicious websites
Answer: B,D

Symantec certification   250-315   250-315 exam   250-315

NO.3 Which Symantec Endpoint Protection 12.1 defense mechanism provides protection against worms like
W32.Silly.FDC, which propagate from system to system through the use of autorun.inf files?
A. Application Control
B. SONAR
C. Client Firewall
D. Exceptions
Answer: A

Symantec test answers   250-315 exam dumps   250-315 practice test   250-315   250-315 exam

NO.4 A company is experiencing a malware outbreak. The company deploys Symantec Endpoint Protection
12.1, with only Virus and Spyware Protection, Application and Device Control, and Intrusion Prevention
technologies. Why would Intrusion Prevention be unable to block all communications from an attacking
host?
A. Intrusion Prevention needs the firewall component to block all traffic from the attacking host.
B. Intrusion Prevention blocks the attack only if the administrator wrote a signature for it.
C. Intrusion Prevention definitions are out-of-date.
D. Intrusion Prevention is set to log only.
Answer: A

Symantec   250-315   250-315 pdf   250-315 study guide   250-315 exam dumps

NO.5 Which Symantec Endpoint Protection 12.1 protection technology provides the primary protection layers
against zero-day network attacks?
A. SONAR
B. Client Firewall
C. Intrusion Prevention
D. System Lockdown
Answer: C

Symantec answers real questions   250-315   250-315 pdf

NO.6 Which two objects in the Symantec Endpoint Protection Manager console describe the most granular
level to which a policy can be applied? (Select two.)
A. Site
B. Domain
C. Group
D. Location
E. Computer
F. User
Answer: C,D

Symantec   250-315   250-315 exam   250-315

NO.7 The fake antivirus family "PC scout" infects systems with a similar method regardless of its variant.
Which SONAR sub-feature can block new variants of the same family, based on sequence of events?
A. artificial intelligence
B. behavioral heuristic
C. human authored signatures
D. behavioral policy lockdown
Answer: C

Symantec   250-315   250-315 exam dumps   250-315   250-315

NO.8 Which Symantec Endpoint Protection 12.1 component improves performance because known good
files are skipped?
A. LiveUpdate Administrator server
B. Group Update Provider
C. Shared Insight Cache server
D. Central Quarantine server
Answer: C

Symantec answers real questions   250-315   250-315 exam   250-315   250-315   250-315

NO.9 How can an administrator manage multiple, independent companies from one database while
maintaining independent groups, computers, and policies?
A. Set up limited administrators with appropriate rights.
B. Set up separate domains.
C. Set up additional sites using a single database.
D. Set up separate locations and turn off inheritance.
Answer: B

Symantec pdf   250-315 answers real questions   250-315 answers real questions   250-315

NO.10 Which component is required in order to run Symantec Endpoint Protection 12.1 protection
technologies?
A. Symantec Endpoint Protection Manager
B. Symantec Endpoint Protection client
C. LiveUpdate Administrator server
D. Symantec Protection Center
Answer: B

Symantec   250-315 certification training   250-315   250-315 certification training

NO.11 How does the Intrusion Prevention System add an additional layer of protection to Network Threat
Protection?
A. It inspects the TCP packet headers and tracks the sequence number.
B. It performs deep packet inspection, reading the packet headers, and data portion.
C. It examines TCP/IP traffic from the application and traces the source of the traffic.
D. It monitors IP datagrams for abnormalities.
Answer: B

Symantec   250-315 test questions   250-315 practice test

NO.12 Drive-by downloads are a common vector of infections. Some of these attacks use encryption to bypass
traditional defense mechanisms. Which Symantec Endpoint Protection 12.1 protection technology blocks
such obfuscated attacks?
A. SONAR
B. Bloodhound heuristic virus detection
C. Client Firewall
D. Browser Intrusion Prevention
Answer: D

Symantec   250-315 dumps   250-315 practice test

NO.13 An administrator is logged in to the Symantec Endpoint Protection Manager (SEPM) console for a
system named SEPM01. The groups and policies that were previously in the SEPM01 console are
unavailable and have been replaced with unfamiliar groups and policies. What was a possible reason for
this change?
A. The administrator was modified from using Computer mode to User mode.
B. The administrator was logged in to the incorrect domain for SEPM01.
C. The administrator was changed from a limited administrator to a system administrator.
D. The administrator was using the Web console instead of the Java console.
Answer: B

Symantec demo   250-315 dumps   250-315   250-315 test answers

NO.14 Which Symantec Endpoint Protection 12.1 component uses reputation to evaluate a file?
A. Shared Insight Cache server
B. Symantec Endpoint Protection client
C. Symantec Endpoint Protection Manager
D. LiveUpdate Administrator server
Answer: B

Symantec test answers   250-315 exam simulations   250-315 braindump   250-315

NO.15 Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec
Endpoint Protection Manager and other products, along with cross-product reporting?
A. Symantec Reporting server
B. Symantec Security Information Manager
C. IT Analytics
D. Symantec Protection Center
Answer: D

Symantec answers real questions   250-315 questions   250-315   250-315

NO.16 A company with one site has a factory with computers in the manufacturing area. Both factory
managers and operators need to log in to these shared computers. Different policies will be applied
depending on whether the individual logging in to the machine is a manager or an operator. Which
Symantec Endpoint Protection 12.1 feature provides this ability?
A. Computer mode
B. Active Directory synchronization
C. User mode
D. Console authentication
Answer: C

Symantec   250-315   250-315

NO.17 According to Symantec, what is a botnet.?
A. systems infected with the same virus strain
B. groups of systems performing remote tasks without the users' knowledge
C. groups of computers configured to steal credit card records
D. compromised systems opening communication to an IRC channel
Answer: B

Symantec   250-315 certification   250-315   250-315

NO.18 A financial company has a security policy that prevents banking system workstations from connecting to
the internet. Which Symantec Endpoint Protection 12.1 protection technology will be prevented from
working on the company's workstations?
A. Insight
B. Application and Device Control
C. Network Threat Protection
D. LiveUpdate
Answer: A

Symantec pdf   250-315   250-315 certification   250-315   250-315

NO.19 Which Symantec Endpoint Protection 12.1 component uses Sybase SQL Anywhere?
A. Symantec Endpoint Protection Manager embedded database
B. Symantec Endpoint Protection Manager remote database
C. LiveUpdate Administrator server
D. Shared Insight Cache server
Answer: A

Symantec   250-315 demo   250-315

NO.20 How many Symantec Endpoint Protection Managers can be connected to an embedded database?
A. 1
B. 2
C. 5
D. 10
Answer: A

Symantec   250-315 test   250-315 exam simulations

ITCertKing offer the latest 74-344 exam material and high-quality BAS-002 pdf questions & answers. Our E20-555 VCE testing engine and MB5-858 study guide can help you pass the real exam. High-quality C_HANATEC_1 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/250-315_exam.html