Question 1

Which two actions can a user take during an in-progress scheduled scan? (Select two.)
A) disable
B) stop
C) pause
D) skip
E) reschedule

Accepted Answer

A user can stop or pause an in-progress scheduled scan to temporarily halt or completely end the scanning process.

Question 2

Which type of email does Internet Email Auto-Protect support?
A) IMAP based email
B) HTTP/s based email
C) SMTP based email
D) Outlook Web Access (OWA)

Accepted Answer

The answer of Which type of email does Internet Email...

Question 3

A Symantec Endpoint Protection 12.1 group has two defined locations based on whether clients are attached to the local network or are remote. The local network location has an administrator- defined scan scheduled to begin each Monday at 09:00. The remote location has an administrator- defined scan scheduled to begin each Wednesday night at 21:00. All systems are used daily and remain powered on all night. Some users in the group have laptops, while the other users have standard desktops. Assuming the laptops are taken home and used each night, what is the effect?
A) All clients will run scans only on Monday.
B) All clients will run scans both on Monday and Wednesday.
C) The laptops will run scans only on Wednesday, while the desktops will run scans only on Monday.
D) The laptops will run scans both the Monday and Wednesday, while the desktops will run scans only on Monday.

Accepted Answer

The laptops will run scans both on Monday and Wednesday because they are taken home and used each night. The desktops will run scans only on Monday because they are not taken home and used each night.

Question 4

A Symantec Endpoint Protection 12.1 administrator has the Virus and Spyware Protection policy configured with Auto-Protect enabled. The administrator is confronted with computer performance issues. Which two options can the administrator use to improve performance? (Select two.)
A) Enable the option to Trust Files on Remote Computers Running Auto-Protect.
B) Enable the Risk Tracer option.
C) Edit the autoprotect.xml and increase the cache value.
D) Enable the option of Network Cache.
E) Enable the Preserve File Times option.

Accepted Answer

The answer of A Symantec Endpoint Protection 12.1 administrator has...

Question 5

A company has three groups of clients: Laptops, Desktops, and Servers. Administrators must have the ability to perform manual scans for these clients from the Symantec Endpoint Protection Manager. In addition, the manual scans need to be customized according to the different clients, for example by customizing whether memory is scanned and which folder locations are scanned. How can the environment be configured to provide this ability while minimizing management overhead?
A) Configure one Virus and Spyware Protection policy with a customized On-Demand scan and set different Exception policies for each group.
B) Configure one Virus and Spyware Protection policy with three customized On-Demand scans.
C) Configure one Virus and Spyware Protection policy with three customized Scheduled scans and setting the schedule to Manual.
D) Configure a different Virus and Spyware Protection policy for each group with customized On- Demand scans.

Accepted Answer

Each group requires a different customized scan, so separate Virus and Spyware Protection policies for each group allow for tailored configurations without increasing management overhead.

Question 6

Refer to the exhibit.  What does the symbol to the left of the system name, SEPMGR12, indicate?
A) The firewall is enabled.
B) The Symantec Endpoint Protection Manager is running.
C) The system is online.
D) The Unmanaged Detector is enabled.

Accepted Answer

The answer of Refer to the exhibit.  What does...

Question 7

Which protection technology assists in protecting documents in real-time when accessed or modified?
A) SONAR
B) Reputation Scans
C) Auto-Protect
D) Scheduled Scans

Accepted Answer

Auto-Protect is a real-time protection technology that scans files for threats when they are accessed or modified.

Question 8

An administrator wants to deploy the Symantec Endpoint Protection 12.1 (SEP) client to computers that are lacking the Symantec Endpoint Protection client. Which tool should the administrator use to discover and deploy the SEP client to the computers?
A) Unmanaged Detector
B) Client Deployment Wizard
C) Symantec Endpoint Recovery Tool
D) Symantec Endpoint Discovery Tool

Accepted Answer

The Client Deployment Wizard is the tool used to discover and deploy the Symantec Endpoint Protection client to computers that do not have it installed.

Question 9

In which client management log can an administrator identify when the client last connected to the Symantec Endpoint Protection Manager?
A) Compliance
B) Audit
C) System
D) Event

Accepted Answer

The System log in Symantec Endpoint Protection Manager provides information about client connections, including the last time a client connected to the manager.

Question 10

A Symantec Endpoint Protection 12.1 (SEP) administrator is remotely deploying SEP clients, but the clients are failing to install on Windows XP. Which two could be preventing installation? (Select two.)
A) Clients are members of a Windows domain and have Windows firewall enabled.
B) Clients are members of a Windows domain and have Windows firewall disabled.
C) Clients are members of a workgroup and simple file sharing is disabled.
D) Clients are members of a workgroup and simple file sharing is enabled.
E) Clients are members of a Windows domain and have a DHCP address.

Accepted Answer

The answer of A Symantec Endpoint Protection 12.1 (SEP) administrator...

Question 11

Which Symantec Endpoint Protection client component must be installed to enable Unmanaged Detector mode?
A) Virus and Spyware Protection
B) SONAR
C) Network Threat Protection
D) Network Access Control

Accepted Answer

Network Threat Protection must be installed to enable Unmanaged Detector mode in Symantec Endpoint Protection.

Question 12

An administrator is modifying a Virus and Spyware Protection policy for a Symantec Endpoint Protection 12.1 (SEP) client because it is demonstrating poor boot performance. Which option should the administrator consider to alleviate this problem?
A) Ensure that Risk Tracer is disabled.
B) Load Auto-Protect during the startup of SEP.
C) Enable File Cache across reboots.
D) Modify the policy to use Insight Cache.

Accepted Answer

The answer of An administrator is modifying a Virus and...

Question 13

Which technology uses heuristics to scan outbound email?
A) Internet Email Auto-Protect
B) Microsoft Outlook Auto-Protect
C) Lotus Notes Auto-Protect
D) SONAR

Accepted Answer

Internet Email Auto-Protect uses heuristics to scan outbound email for potential threats.

Question 14

A company successfully deploys Symantec Endpoint Protection 12.1 to its clients. However, when the company deploys the client to the servers, the servers immediately reboot. The company needs to prevent the servers from rebooting during normal business hours. What is wrong?
A) The "Hard restart" option is enabled in the Restart Settings tab.
B) The "Restart immediately if the user is not logged in" option is enabled.
C) A previous version of the client was installed.
D) There is "No prompt" configured on the Restart Settings tab.

Accepted Answer

The "Restart immediately if the user is not logged in" option is likely enabled, causing the servers to reboot immediately after the client installation.

Question 15

Which command line syntax invokes the Symantec Endpoint Protection Client Service to determine whether a more recent copy of the configuration file is available on the management server?
A) smc -getconfig
B) smc -getsylink
C) smc -update
D) smc -updateconfig

Accepted Answer

The `smc -updateconfig` command line syntax invokes the Symantec Endpoint Protection Client Service to determine whether a more recent copy of the configuration file is available on the management server.

Question 16

Some customers report that when they run the command "smc -stop" on their clients, they are unable to connect to network resources. What is wrong?
A) The customers need to enable the Smart DHCP option in their firewall policy.
B) The security option "Block all traffic until the firewall starts and after the firewall stops" is enabled.
C) A location awareness policy has been configured that applies when the service is stopped.
D) The network card is blocked by a Device Control policy.

Accepted Answer

The security option "Block all traffic until the firewall starts and after the firewall stops" is likely enabled, which would prevent network connectivity when the firewall service is stopped.

Question 17

Immediately after installation, what does a managed client do to contact the Symantec Endpoint Protection Manager (SEPM)?
A) Initiate communication on port 80.
B) Initiate communication on port 8014.
C) Initiate communication on port 8445.
D) Wait for the SEPM if in Push mode.

Accepted Answer

The managed client initiates communication on port 8014, which is the default port used by Symantec Endpoint Protection Manager for client-server communication.

Question 18

A user added a daily 10:00 scheduled scan to their Symantec Endpoint Protection 12.1 client. After reviewing the logs, the user confirms that the scan failed to start at 10:00. Why did the scan fail to start?
A) Tuning Options were set for best application performance.
B) "Delay scheduled scans when running on battery" was enabled.
C) Scan Progress options were set to "Do not show progress".
D) The Windows scheduler service was disabled.

Accepted Answer

If "Delay scheduled scans when running on battery" was enabled, the scan would not start at the scheduled time if the device was running on battery power.

Question 19

Refer to the exhibit.  The status of two clients on the Symantec Endpoint Protection Manager is provided in the exhibit. They indicate that the clients are "Offline". What does the Offline status indicate?
A) Live Update is not running on clients.
B) Antivirus is disabled in clients.
C) There are communications issues with clients.
D) Installation was unsuccessful on clients.

Accepted Answer

The answer of Refer to the exhibit.  The status...

Question 20

A Symantec Endpoint Protection 12.1 client is running a user-defined scan when a scheduled, administrator-defined scan is scheduled to launch. What is the effect on the client?
A) The user-defined scan will be paused in order to launch the administrator-defined scan.
B) The administrator-defined scan will launch after the user-defined scan completes.
C) The user-defined scan will be canceled in order to launch the administrator-defined scan.
D) The administrator-defined scan will be skipped and the user-defined scan will continue.

Accepted Answer

The administrator-defined scan is scheduled and takes precedence, so it will wait for the user-defined scan to complete before launching.

Exam 1: Administration of Symantec Endpoint Protection 14 (Broadcom)

Which two actions can a user take during an in-progress scheduled scan? (Select two.)

Which type of email does Internet Email Auto-Protect support?

A Symantec Endpoint Protection 12.1 administrator has the Virus and Spyware Protection policy configured with Auto-Protect enabled. The administrator is confronted with computer performance issues. Which two options can the administrator use to improve performance? (Select two.)

Refer to the exhibit. What does the symbol to the left of the system name, SEPMGR12, indicate?

Which protection technology assists in protecting documents in real-time when accessed or modified?

An administrator wants to deploy the Symantec Endpoint Protection 12.1 (SEP) client to computers that are lacking the Symantec Endpoint Protection client. Which tool should the administrator use to discover and deploy the SEP client to the computers?

In which client management log can an administrator identify when the client last connected to the Symantec Endpoint Protection Manager?

A Symantec Endpoint Protection 12.1 (SEP) administrator is remotely deploying SEP clients, but the clients are failing to install on Windows XP. Which two could be preventing installation? (Select two.)

Which Symantec Endpoint Protection client component must be installed to enable Unmanaged Detector mode?

An administrator is modifying a Virus and Spyware Protection policy for a Symantec Endpoint Protection 12.1 (SEP) client because it is demonstrating poor boot performance. Which option should the administrator consider to alleviate this problem?

Which technology uses heuristics to scan outbound email?

A company successfully deploys Symantec Endpoint Protection 12.1 to its clients. However, when the company deploys the client to the servers, the servers immediately reboot. The company needs to prevent the servers from rebooting during normal business hours. What is wrong?

Which command line syntax invokes the Symantec Endpoint Protection Client Service to determine whether a more recent copy of the configuration file is available on the management server?

Some customers report that when they run the command "smc -stop" on their clients, they are unable to connect to network resources. What is wrong?

Immediately after installation, what does a managed client do to contact the Symantec Endpoint Protection Manager (SEPM) ?

A user added a daily 10:00 scheduled scan to their Symantec Endpoint Protection 12.1 client. After reviewing the logs, the user confirms that the scan failed to start at 10:00. Why did the scan fail to start?

Refer to the exhibit. The status of two clients on the Symantec Endpoint Protection Manager is provided in the exhibit. They indicate that the clients are "Offline". What does the Offline status indicate?

A Symantec Endpoint Protection 12.1 client is running a user-defined scan when a scheduled, administrator-defined scan is scheduled to launch. What is the effect on the client?