Symantec Administration of Symantec Data Center Security: Server Advanced

QUESTION NO: 1
What is the process for Acknowledging an Event?

A. Right-click the Agent > click Acknowledge All Events B. Assets > Network Assets view > open the Asset Details view > select the Acknowledge button C. Right-click an Event > click Acknowledge D. Monitors > Events view > open the Event Details Master View > select the Acknowledge button

Correct Answer: C

QUESTION NO: 2
The log files show that the management server is experiencing event-posting delays.
Which two reasons can cause the delay? (Select two.)

A. An alert or warning needs to be processed B. Trivial events are uploaded in bulk C. A user is logged into a protected system D. The database is overtaxed E. Too many events are being generated on the endpoints

Correct Answer: D,E

QUESTION NO: 3
Data Center Security: Server Advanced prevention policies include application sandboxes to protect common applications.
Which two application sandboxes are excluded from the default policy? (Select two.)

A. Sybase Database Server B. Microsoft Exchange Server C. Microsoft SQL Server D. Microsoft Sharepoint Server E. Internet Information Services

Correct Answer: A,D

QUESTION NO: 4
Which two events can be monitored by deploying the Diagnostics policy SDCSS_Server_Monitor to the management server? (Select two.)

A. Database connection failure B. Server shutdown C. Failure to send an email alert D. An audit trail of queries run by users E. Failed console login attempts

Correct Answer: B,C

QUESTION NO: 5
Which two protection strategies are available when building a Symantec Data Center Security: Server Advanced Windows prevention policy? (Select two.)

A. Hardened B. Core C. Protected Whitelisting D. Targeted E. Strict

Correct Answer: A,C

QUESTION NO: 6
What is the default check-in polling interval on initial agent installation?

A. 480 seconds B. 60 seconds C. 300 seconds D. 10 seconds

Correct Answer: C

QUESTION NO: 7
Which two settings are configured under the Threshold tab when creating an Alert? (Select two.)

A. Maximum number of events B. Time window in minutes C. Minimum number of events D. Alert policy name E. Time window in seconds

Correct Answer: B,C

QUESTION NO: 8
Where is the upgrade alarm raised after updating the security virtual appliance?

A. Management Server Console B. vSphere Web client C. Appliance Management Console D. vSphere Management Client

Correct Answer: B

QUESTION NO: 9
Which component is responsible for displaying information to administrators?

A. Management Server B. Agent C. Gateway D. Console

Correct Answer: C

QUESTION NO: 10
Which action should an administrator take to maximize performance of the management console?

A. Increase physical memory of the management server B. Increase the disk space of the management console C. Increase the database capacity D. Increase the management console's heap space

Correct Answer: D

QUESTION NO: 11
Which document should be referenced to validate the compatibility of Symantec Data Center Security: Server Advanced agents with the operating systems of intended critical systems?

A. Symantec Data Center Security: Server Advanced Platform and Feature Matrix B. Symantec Data Center Security: Server Advanced Implementation Guide C. Symantec Data Center Security: Server Advanced Planning and Deployment Guide D. Symantec Data Center Security: Server Advanced Administrator's Guide

Correct Answer: A

QUESTION NO: 12
Which action is an administrator unable to initiate on an agent leveraging the Windows Agent_Diagnostics detection policy?

A. Update the agent version B. Edit agent configuration C. Collect agent information D. Restart the agent services

Correct Answer: A

Symantec Administration of Symantec Data Center Security: Server Advanced - 250-505 Exam Questions