2014年4月17日星期四

ITCertMaster Symantec ST0-116 exam practice questions and answers

ITCertMaster's Symantec ST0-116 exam training materials is no other sites in the world can match. Of course, this is not only the problem of quality, it goes without saying that our quality is certainly the best. More important is that ITCertMaster's exam training materials is applicable to all the IT exam. So the website of ITCertMaster can get the attention of a lot of candidates. They believe and rely on us. It is also embodied the strength of our ITCertMaster site. The strength of ITCertMaster is embodied in it. Our exam training materials could make you not help recommend to your friends after you buy it. Because it's really a great help to you.

There is no reason to waste your time on a test. If you feel it is difficult to prepare for Symantec ST0-116 and need spend a lot of time on it, you had better use ITCertMaster test dumps which will help you save lots of time. What's more, ITCertMaster exam dumps can guarantee 100% pass your exam. There is no better certification training materials than ITCertMaster dumps. Instead of wasting your time on preparing for ST0-116 exam, you should use the time to do significant thing. Therefore, hurry to visit ITCertMaster.com to know more details. Miss the opportunity, you will regret it.

Symantec certification ST0-116 exam is very popular among the IT people to enroll in the exam. Passing Symantec certification ST0-116 exam can not only chang your work and life can bring, but also consolidate your position in the IT field. But the fact is that the passing rate is very low.

Are you worried about how to passs the terrible Symantec ST0-116 exam? Do not worry, With ITCertMaster's Symantec ST0-116 exam training materials in hand, any IT certification exam will become very easy. ITCertMaster's Symantec ST0-116 exam training materials is a pioneer in the Symantec ST0-116 exam certification preparation.

ITCertMaster Symantec ST0-116 exam information is proven. We can provide the questions based on extensive research and experience. ITCertMaster has more than 10 years experience in IT certification ST0-116 exam training, including questions and answers. On the Internet, you can find a variety of training tools. ITCertMaster ST0-116 exam questions and answers is the best training materials. We offer the most comprehensive verification questions and answers, you can also get a year of free updates.

Selecting ITCertMaster can 100% help you pass the exam. According to Symantec ST0-116 test subjects' changing, we will continue to update our training materials and will provide the latest exam content. ITCertMaster can provide a free 24-hour online customer service for you . If you do not pass Symantec certification ST0-116 exam, we will full refund to you.

The Symantec ST0-116 certification exam is not only validate your skills but also prove your expertise. It can prove to your boss that he did not hire you in vain. The current IT industry needs a reliable source of Symantec ST0-116 certification exam, ITCertMaster is a good choice. Select ITCertMaster ST0-116 exam material, so that you do not need yo waste your money and effort. And it will also allow you to have a better future.

Exam Code: ST0-116
Exam Name: Symantec (Symantec Data Loss Prevention 11 Technical Assessment)
Guaranteed success with practice guides, No help, Full refund!
176 Questions and Answers
Updated: 2014-04-16

ST0-116 Free Demo Download: http://www.itcertmaster.com/ST0-116.html

NO.1 A user is unable to log in as sysadmin. The Data Loss Prevention system is configured to use Active
Directory authentication. The user is a member of two roles, sysadmin and remediator. How should the
user log in to the user interface in the sysadmin role?
A. sysadmin\username@domain
B. sysadmin\username
C. domain\username
D. sysadmin\username\domain
Answer: B

Symantec answers real questions   ST0-116   ST0-116 exam prep   ST0-116   ST0-116 questions

NO.2 Which two policy management actions can result in a reduced number of incidents for a given traffic
flow? (Select two.)
A. adding additional component matching to the rule
B. adding data owner exceptions
C. deploying to additional detection servers
D. increasing condition match count
E. adding additional severities
Answer: B, D

Symantec   ST0-116   ST0-116   ST0-116 braindump   ST0-116 questions

NO.3 An administrator is running a Discover Scanner target scan and the scanner is unable to
communicate back to the Discover Server. Where will the files be stored.?
A. Discover Server incoming folder
B. scanner's outgoing folder
C. scanner's incoming folder
D. Enforce incident persister
Answer: B

Symantec   ST0-116   ST0-116

NO.4 Which two remediation actions are available for Network Protect? (Select two.)
A. Copy
B. Move
C. Block
D. Rename
E. Quarantine
Answer: A, E

Symantec braindump   ST0-116   ST0-116 practice test   ST0-116   ST0-116 dumps

NO.5 A company needs to scan all of its file shares on a weekly basis to make sure sensitive data is being
stored correctly. The total volume of data on the file servers is greater than 1 TB . Which approach will
allow the company to quickly scan all of this data on a weekly basis?
A. run an initial complete scan of all the file shares, then modify the scan target to add date filters and
exclude any files created or modified before the initial scan was run
B. run an initial complete scan of all the file shares, then modify the scan target to an incremental scan
type
C. create a separate scan target for each file share and exclude files accessed before the start of each
scan
D. run an initial complete scan of all file shares, create a summary report of all incidents created by the
scan, then run weekly scans and compare incidents from weekly scans to incidents from the complete
scan
Answer: B

Symantec dumps   ST0-116   ST0-116   ST0-116 test questions   ST0-116

NO.6 Which product provides support for the Citrix XenApp virtualization platform?
A. Endpoint Prevent
B. Network Discover
C. Network Protect
D. Network Prevent
Answer: A

Symantec certification training   ST0-116   ST0-116 test   ST0-116

NO.7 What is a feature of keyword proximity matching?
A. It will match on whole keywords only.
B. It has a maximum distance between keywords of 99.
C. It only matches on message body.
D. It evaluates each keyword pair independently.
Answer: D

Symantec exam   ST0-116 exam prep   ST0-116 dumps   ST0-116   ST0-116

NO.8 To manually troubleshoot DLP Agent issues, the database and log viewer tools must be executed in
which location?
A. in the same location as the dcs.ead file location
B. in the same location as the cg.ead file location
C. in the same location as the ks.ead file location
D. in the same location as the is.ead file location
Answer: C

Symantec demo   ST0-116   ST0-116 exam prep   ST0-116 test   ST0-116 dumps   ST0-116 original questions

NO.9 A divisional executive requests a report of all incidents generated by a particular region, summarized
by department. What must be populated to generate this report?
A. remediation attributes
B. sender correlations
C. status groups
D. custom attributes
Answer: D

Symantec   ST0-116 exam dumps   ST0-116

NO.10 Which DLP Agent task is unique to the Symantec Management Platform and is unavailable through
the Enforce console?
A. Change Endpoint server
B. Restart agent
C. Pull agent logs
D. Set log level
Answer: D

Symantec   ST0-116   ST0-116   ST0-116   ST0-116

NO.11 What must a policy manager do when working with Exact Data Matching (EDM) indexes?
A. re-index large data sources on a daily or weekly basis
B. index the original data source on the detection server
C. deploy the index only to specific detection servers
D. create a new data profile if data source schema changes
Answer: D

Symantec dumps   ST0-116 exam dumps   ST0-116 test questions

NO.12 Which two functions of the communications architecture ensure that the system will automatically
recover if a network connectivity failure occurs between the detection servers and the Enforce Server?
(Select two.)
A. Oracle database backup
B. detection server autonomous monitoring
C. Enforce Server offline alert notification
D. detection server incident queuing
E. detection server alert archiving
Answer: B, D

Symantec test answers   ST0-116   ST0-116   ST0-116 exam prep

NO.13 The database is full and the Incident Persister is unable to process incidents. Which two file types
could be present in Vontu/protect/incidents? (Select two.)
A. .idx
B. .edc
C. .idc
D. .inc
E. .bad
Answer: C, E

Symantec original questions   ST0-116 questions   ST0-116   ST0-116   ST0-116 dumps   ST0-116

NO.14 Which Network Discover option is used to determine whether confidential data exists without having to
scan the entire target?
A. Byte Throttling
B. File Throttling
C. Match Thresholds
D. Inventory Mode Scanning
Answer: D

Symantec   ST0-116   ST0-116 study guide   ST0-116   ST0-116

NO.15 What are two benefits of the Symantec Data Loss Prevention 11 security architecture? (Select two.)
A. Communication is initiated by the detection servers inside the firewall.
B. SSL communication is used for user access to the Enforce Platform.
C. Endpoint Agent to Endpoint Server communication uses the Triple Data Encryption Standard (Triple
DES).
D. Confidential information captured by system components is stored using Advanced Encryption
Standards (AES) symmetric keys.
E. All indexed data uploaded into the Enforce Platform is protected with a two-way hash.
Answer: B, D

Symantec   ST0-116   ST0-116   ST0-116

NO.16 Where should the Network Discover detection server be placed in a corporate network architecture?
A. inside the DMZ
B. on the same virtual LAN as the proxy server
C. inside the corporate network
D. on the same switch as the Oracle database server
Answer: C

Symantec   ST0-116 test   ST0-116 practice test

NO.17 A role is configured for XML export and a user executes the export XML incident action. What must be
done before history information is included in the export?
A. A remediator must take an action on the incident.
B. History must be enabled as a tab or panel in the incident snapshot layout.
C. Incident history must be enabled in the user's role.
D. The manager.properties must be configured for XML export.
Answer: C

Symantec   ST0-116   ST0-116 test questions   ST0-116   ST0-116   ST0-116

NO.18 A Data Loss Prevention administrator notices that several errors occurred during a Network Discover
scan. Which report can the administrator use to determine exactly which errors occurred and when?
A. Discover Incident report sorted by target name and scan
B. Full Activity report for that particular scan
C. Server Event report from Server Overview
D. Full Statistics report for that particular scan
Answer: B

Symantec   ST0-116 study guide   ST0-116 exam   ST0-116   ST0-116

NO.19 After installing several new DLP Agents, the Data Loss Prevention administrator discovers that none of
the endpoint agents are appearing on the Agent Overview page. After refreshing the page several times,
and determining that the equipment is powered on and connected to the network, the Agent Overview
page still fails to display the new agents. What is a possible cause for this issue?
A. The DLP Agents need to be added manually through the Symantec Management Platform.
B. The DLP Agents were installed with the incorrect Endpoint server IP address.
C. The assigned Endpoint server needs to be recycled in order to detect the new DLP Agents.
D. The Endpoint Location is set to "Manually" instead of "Automatically" in the Enforce user interface.
Answer: B

Symantec practice test   ST0-116   ST0-116

NO.20 How can an administrator validate that once a policy is updated and saved it has been enabled on a
specific detection server?
A. check the status of the policy on the policy list page
B. check to see whether the policy was loaded under System > Servers > Alerts
C. check the policy and validate the date and time it was last updated
D. check to see whether the policy was loaded under System > Servers > Events
Answer: D

Symantec   ST0-116 practice test   ST0-116 test answers   ST0-116

ITCertMaster offer the latest MB6-700 Practice Test and high-quality ICGB PDF Exam Questions training material. Our 642-384 VCE testing engine and HP2-Z24 dumps can help you pass the real exam. High-quality 000-120 Exam Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertmaster.com/ST0-116.html

没有评论:

发表评论