Free Symantec ST0-134 Exam Dumps Questions & Answers

Which action does SONAR take before convicting a process?

• A.  checks the reputation of the process
• B.  blocks suspicious behavior
• C.  quarantines the process
• D.  reboots the system

An administrator enables the "Learn applications that run on the client computers" setting for a group of clients. Later, when using the Search for Applications function, the administrator is unable to find results. What is the cause of the problem?

• A.  The administrator is a limited administrator without rights to view reports.
• B.  Submissions are disabled on the Symantec Endpoint Protection client by the user.
• C.  Pull mode is enabled and is unsupported by application learning.
• D.  Application learning is disabled under communication settings at the site level.

Which two options are available when configuring DNS change detected for SONAR? (Select two.)

• A.  Quarantine
• B.  Log
• C.  Trace
• D.  Block
• E.  Active Response

Which protection technology can detect botnet command and control traffic generated on the Symantec Endpoint Protection client machine?

• A.  Intrusion Prevention
• B.  SONAR
• C.  Risk Tracer
• D.  Insight

Which Symantec Endpoint Protection 12.1 component provides single-sign-on to the Symantec Endpoint Protection Manager and other products, along with cross-product reporting?

• A.  IT Analytics
• B.  Symantec Reporting server
• C.  Symantec Protection Center
• D.  Symantec Security Information Manager