250-505 by Symantec Actual Free Exam Questions And Answers

Question 1

Symantec Data Center Security: Server Advanced agent log files contain all events processed by an agent.
Where are the agent log files stored?

A. On the management server

B. On the management console

C. On the database server

D. On the local agent computer

Discussion 0

Correct Answer: D Vote an answer

Question 2

What is the minimum number of front-end management servers required to handle agent communications for a customer with a data center consisting of 35,000 managed endpoints?

A. 2

B. 4

C. 3

D. 1

Discussion 0

Correct Answer: B Vote an answer

Question 3

An administrator with a data center consisting of multiple Linux web servers running Apache is asking how Symantec Data Center Security: Server Advanced can be leveraged to detect SQL injection attacks targeted at the servers.
Which advanced policy setting in the UNIX Baseline Policy should be enabled to detect Generic SQL Injection Attacks?

A. Web Server Detection

B. Apache Server Logs

C. SQL Web Attacks

D. System Attack Detection

Discussion 0

Correct Answer: D Vote an answer

Question 4

Which page in the management console can be used to filter events by time and search for events based on specified criteria?

A. Home Page

B. Monitors Page

C. Reports Page

D. Assets Page

Discussion 0

Correct Answer: B Vote an answer

Question 5

How should an administrator create a custom database query on the management console that can be run on-demand?

A. Create multiple simple data queries and merge them to create a new report

B. Create a query with the advanced query feature enabled and type the SQL query inside

C. Request the database administrator to run the custom query

D. Create a Microsoft SQL query script that will run at a set interval

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which feature can be configured using a detection policy?

A. De-escalation of Administrator Privileges

B. Closing network back doors by defining ports to be monitored

C. Restricting Access to Externally Connected Devices

D. Real-Time File Integrity Monitoring

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which two platforms are supported by Symantec Data Center Security: Server Advanced? (Select two.)

A. Ubuntu 9.04

B. Solaris 10

C. AIX 5.2

D. Mac OSX 10.9

E. Red Hat Enterprise Linux 6

Discussion 0

Correct Answer: B,E Vote an answer

Question 8

Which format is used to store real-time events on the agent?

A. .ZIP

B. .TXT

C. .LOG

D. .CSV

Discussion 0

Correct Answer: D Vote an answer

Question 9

Which two statements accurately describe Symantec Data Center Security: Server Advanced simple failover? (Select two.)

A. The management console uses the first server in the ordered list of management servers when it starts up

B. An ordered list of management servers for simple failover is maintained by the SQL Data Store

C. The Symantec Data Center Security: Server Advanced Security Virtual Appliance supports simple failover

D. Can provide static load balancing via manual assignment of agents to each Tomcat server

E. Enables deployment of a set of front-end Tomcat servers without reconfiguring the IT infrastructure

Discussion 0

Correct Answer: D,E Vote an answer

Question 10

Which two capabilities are available with the Symantec Data Center Security: Server Advanced agent? (Select two.)

A. The ability to remotely monitor another host without a native agent

B. The ability to intercept the system calls to enforce prevention policies

C. The ability to send SNMP Traps to a supervisory console

D. The ability to secure communications with agent and console

E. The ability to download the anti-malware definitions

Discussion 0

Correct Answer: A,B Vote an answer

Question 11

An administrator wants to use Symantec Data Center Security: Server Advanced to support Requirement 11.5 of the PCI DSS v2.0 (use file integrity monitor) on their Windows Server.
Which two Custom Controls from the Windows Template policy should the administrator use? (Select two.)

A. Text Log

B. NT Event Log

C. Prevention Watch

D. Registry Watch

E. File Watch

Discussion 0

Correct Answer: D,E Vote an answer

Question 12

Which listening port is used, by default, on the agent for real-time notification?

A. 57

B. 2222

C. 22

D. 666

Discussion 0

Correct Answer: A Vote an answer

Question 13

An administrator stops the SISIPSService service.
How will this impact the agent?

A. The intrusion protection service is stopped after reboot

B. Agent-manager communication is stopped

C. The agent can still communicate with the manager, but logs will fail to be uploaded

D. The intrusion protection service is immediately stopped

Discussion 0

Correct Answer: B Vote an answer

Question 14

Which two tasks are Symantec best practices when initially tuning a policy? (Select two.)

A. Apply the common configuration with real-time notification disabled

B. Grant policy override capability to a group or user

C. Enable prevention before applying the prevention policy to the asset(s)

D. Apply a protected whitelist policy template to a large number of assets

E. Disable prevention before applying the prevention policy to the asset(s)

Discussion 0

Correct Answer: B,E Vote an answer

Symantec Administration of Symantec Data Center Security: Server Advanced - 250-505 Exam Practice Test

Contact Us

Useful Links

Latest Updated