250-315

250-315 practice questions, page 11 of 11, with answer review and explanations.

Question 51

How are Insight results stored?

  1. encrypted on the Symantec Endpoint Protection Manager
  2. unencrypted on the Symantec Endpoint Protection Manager
  3. encrypted on the Symantec Endpoint Protection client
  4. unencrypted on the Symantec Endpoint Protection client

Question 52

Which two options are available when configuring DNS change detected for SONAR? (Select two.)

  1. Block
  2. Active Response
  3. Quarantine
  4. Log
  5. Trace

Question 53

Refer to the exhibit. In the use case displayed in the exhibit, why is Notepad unable to save the changes to this file?

  1. Tamper Protection is preventing Notepad from modifying the host file.
  2. SONAR is set to block host file modifications.
  3. System Lockdown is enabled.
  4. SONAR High Risk detection is set to Block.

Question 54

An administrator selects the Backup files before attempting to repair the Remediations option in the Auto-Protect policies. Which two actions occur when a virus is detected? (Select two.)

  1. replace the file with a place holder
  2. check the reputation
  3. store in Quarantine folder
  4. send the file to Symantec Insight
  5. encrypt the file

Question 55

In the virus and Spyware Protection policy, an administrator sets the First action to Clean risk and sets If first action fails to Delete risk. Which two factors should the administrator consider? (Select two.)

  1. The deleted file may still be in the Recycle Bin.
  2. IT Analytics may keep a copy of the file for investigation.
  3. False positives may delete legitimate files.
  4. Insight may back up the file before sending it to Symantec.
  5. A copy of the threat may still be in the quarantine.