Question 1

When configuring remote logging, where are the logs redirected?

Accepted Answer

Remote logging typically redirects logs to a syslog server, which is a standard for message logging.

Question 2

A DLP administrator is testing Network Prevent for Web functionality. When the administrator posts a small test file to a cloud storage website, no new incidents are reported. What should the administrator do to allow incidents to be generated against this file?

Accepted Answer

The "Ignore requests Smaller Than" setting determines the minimum size of requests that will be inspected. Setting it to 1 ensures that even small files are inspected, allowing incidents to be generated.

Question 3

Which action is available for use in both Smart Response and Automated Response rules?

Accepted Answer

The answer of Which action is available for use in...

Question 4

Which option is an accurate use case for Information Centric Encryption (ICE)?

Accepted Answer

Information Centric Encryption (ICE) is typically used to encrypt files that match Data Loss Prevention (DLP) policies when they are being copied to removable storage, using encryption keys to ensure data security.

Question 5

Having received a targeted attack from a spoofed email domain, a company wants to take advantage of DKIM validation for inbound mail. The messaging administrator has enabled sender authentication and DKIM validation and now needs to configure a content filtering policy to quarantine any messages that fail. Which condition should be met for the content filtering policy to fire?

Accepted Answer

The message header contains "dkim=fail" is the correct condition to check for DKIM validation failures, as DKIM results are typically included in the email headers.

Question 6

An organization has an extremely large LDAP database. What is done in Symantec Messaging Gateway 10.5 that will help prevent mail from backing up in the system during the initial directory building process?

Accepted Answer

Preloading the directory data cache helps to prevent mail from backing up by ensuring that the necessary directory information is readily available, thus avoiding delays during the initial directory building process.

Question 7

An administrator is unable to log in to the Enforce management console as "sysadmin". Symantec DLP is configured to use Active Directory authentication. The administrator is a member of two roles: "sysadmin" and "remediator." How should the administrator log in to the Enforce console with the "sysadmin" role?

Accepted Answer

The correct format for logging in when using Active Directory authentication is "domain\username".

Question 8

Why would an administrator set the Similarity Threshold to s=zero when testing and tuning a Vector Machine Learning (VML) profile?

Accepted Answer

Setting the Similarity Threshold to zero allows the administrator to see all potential matches, including both true positives and false positives, which helps in evaluating and tuning the model's performance across the entire range of data.

Question 9

What is an advantage of Symantec Content Encryption over TLS encryption?

Accepted Answer

The answer of What is an advantage of Symantec Content...

Question 10

An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization. Which detection method should the organization use to meet this requirement?

Accepted Answer

The answer of An organization wants to restrict employees to...

Question 11

Which command is used to collect the configuration and log files from the command line interface (CLI)?

Accepted Answer

The answer of Which command is used to collect the...

Question 12

Which two functions of Symantec Messaging Gateway 10.5 can use information retrieved from a directory data source? (Select two.)

Accepted Answer

The answer of Which two functions of Symantec Messaging Gateway...

Question 13

How does enabling and configuring sender authentication options in Symantec Messaging Gateway 10.5 help to protect against spam?

Accepted Answer

Enabling and configuring sender authentication options helps protect against messages with forged sender domains by verifying the authenticity of the sender's domain, thus reducing the risk of spam and phishing attacks.

Question 14

Which log would an administrator access to determine why an email was deleted by the scanner?

Accepted Answer

The answer of Which log would an administrator access to...

Question 15

Which command allows the administrator to track messages from the command line interface (CLI)?

Accepted Answer

malquery is the command that allows the administrator to track messages from the command line interface (CLI).

Question 16

Which logs will help an administrator determine why antispam rules have failed to update?

Accepted Answer

The answer of Which logs will help an administrator determine...

Question 17

Which two tasks can an end-user perform while logged in to the Control Center when authentication and address resolution are enabled? (Select two.)

Accepted Answer

The answer of Which two tasks can an end-user perform...

Question 18

Symantec Messaging Gateway 10.5 includes a policy-based encryption feature. How is this new feature licensed?

Accepted Answer

The answer of Symantec Messaging Gateway 10.5 includes a policy-based...

Question 19

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers. What should the administrator do to make the Network Discover option available?

Accepted Answer

The answer of A DLP administrator is attempting to add...

Question 20

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration. What is one possible reason that the agent fails to receive the new configuration?

Accepted Answer

The answer of A DLP administrator created a new agent...

Exam 4: Administration of Symantec ProxySG 6.7