显示标签为“ST0-079”的博文。显示所有博文
显示标签为“ST0-079”的博文。显示所有博文

2014年2月12日星期三

Symantec certification ST0-079 exam questions and answers come out

ST0-079 certification exam is a very import component Symantec certification exam. But passing Symantec certification ST0-079 exam is not so simple. In order to give to relieve pressure and save time and effort for candidates who take a preparation for the ST0-079 certification exam, IT-Tests.com specially produce a variety of training tools. So you can choose an appropriate quick training from IT-Tests.com to pass the exam.

IT-Tests.com site has a long history of providing Symantec ST0-079 exam certification training materials. It has been a long time in certified IT industry with well-known position and visibility. Our Symantec ST0-079 exam training materials contains questions and answers. Our experienced team of IT experts through their own knowledge and experience continue to explore the exam information. It contains the real exam questions, if you want to participate in the Symantec ST0-079 examination certification, select IT-Tests.com is unquestionable choice.

IT-Tests.com is a website to improve the pass rate of Symantec certification ST0-079 exam. Senior IT experts in the IT-Tests.com constantly developed a variety of successful programs of passing Symantec certification ST0-079 exam, so the results of their research can 100% guarantee you Symantec certification ST0-079 exam for one time. IT-Tests's training tools are very effective and many people who have passed a number of IT certification exams used the practice questions and answers provided by IT-Tests. Some of them who have passed the Symantec certification ST0-079 exam also use IT-Tests's products. Selecting IT-Tests.com means choosing a success

Exam Code: ST0-079
Exam Name: Symantec (Symantec Brightmail Gateway 8.0 (STS))
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Total Q&A: 114 Questions and Answers
Last Update: 2014-02-12

You can free download part of IT-Tests's practice questions and answers about Symantec certification ST0-079 exam online, as an attempt to test our quality. As long as you choose to purchase IT-Tests's products, we will do our best to help you pass Symantec certification ST0-079 exam disposably.

If you buy the IT-Tests's products, we will not only spare no effort to help you pass the certification exam, but also provide a free update and upgrade service. If the official change the outline of the certification exam, we will notify customers immediately. If we have any updated version of test software, it will be immediately pushed to customers. IT-Tests.com can promise to help you succeed to pass your first Symantec certification ST0-079 exam.

There are many ways to help you prepare for your Symantec ST0-079 exam. IT-Tests.com provide a reliable training tools to help you prepare for your Symantec ST0-079 exam certification. The IT-Tests.com Symantec ST0-079 exam materials are including test questions and answers. Our materials are very good sofeware that through the practice test. Our materials will meet all of theIT certifications.

ST0-079 (Symantec Brightmail Gateway 8.0 (STS)) Free Demo Download: http://www.it-tests.com/ST0-079.html

NO.1 Which feature requires Invalid Recipient Handling to be enabled?
A.Bounce Attack Prevention
B.Directory Harvest Attack recognition
C.Reputation Lookup
D.Fastpass
ANSWER: B

Symantec demo   ST0-079 answers real questions   ST0-079 demo   ST0-079 demo

NO.2 What are two functions of the Control Center? (Select two.)
A.It provides message management services.
B.It routes messages for delivery.
C.It hosts Spam Quarantine.
D.It downloads virus definitions.
E.It runs filters.
ANSWER: AC

Symantec   ST0-079 test questions   ST0-079 questions   ST0-079 practice test

NO.3 True file typing is a feature used to combat which behavior?
A.spamming
B.renaming
C.phishing
D.spimming
ANSWER: B

Symantec certification   ST0-079 questions   ST0-079   ST0-079 answers real questions

NO.4 Which feature of Symantec Brightmail Gateway 8.0 detects Non-Delivery Reports (NDR) created by an
attacker?
A.Directory Harvest Attack
B.Anti-Phishing Filter
C.Bounce Attack Prevention
D.Symantec Probe Network
ANSWER: C

Symantec   ST0-079   ST0-079

NO.5 What does the Fastpass feature do?
A.skips virus scanning for known viruses
B.skips resource intensive spam scanning steps
C.passes incoming mail directly to the downstream MTA
D.bypasses scanning on outgoing mail
ANSWER: B

Symantec   ST0-079   ST0-079 questions

NO.6 What is the Heuristic Detection (Bloodhound) feature designed to detect?
A.unknown viruses
B.fuzzy matches against compliance rules
C.regex matches
D.Denial of Service (DoS) attacks
ANSWER: B

Symantec practice test   ST0-079 braindump   ST0-079   ST0-079

NO.7 Which two email authentication technologies are included in Symantec Brightmail Gateway 8.0?
(Select two.)
A.Sender ID
B.POP before SMTP
C.Domain Keys Identified Mail (DKIM)
D.Certified Email
E.Sender Policy Framework (SPF)
ANSWER: AE

Symantec exam dumps   ST0-079 test answers   ST0-079 questions   ST0-079 test answers

NO.8 What happens to a message that is forwarded to the Suspect Virus Quarantine?
A.It is automatically deleted after one week.
B.It is rescanned when the configured hold time has elapsed.
C.It is placed in the administrator's queue for review.
D.It is forwarded to Symantec Security Response.
ANSWER: B

Symantec answers real questions   ST0-079   ST0-079   ST0-079   ST0-079

NO.9 A client needs to import structured customer data.
Which resource is used for this requirement?
A.records
B.dictionaries
C.regular expressions
D.patterns
ANSWER: A

Symantec   ST0-079   ST0-079 questions   ST0-079 certification

NO.10 What are two parts of the Control Center? (Select two.)
A.Message Store
B.LDAP Sync Service
C.Brightmail Engine
D.LiveUpdate Conduit
E.Suspect Virus Quarantine
ANSWER: BE

Symantec   ST0-079 pdf   ST0-079 braindump

NO.11 Which MTA operation is used if incoming messages need to be stopped while waiting for new virus
definitions?
A.Accept and deliver messages normally
B.Pause message scanning and delivery
C.Do not accept incoming messages
D.Accept but do not scan incoming messages
ANSWER: B

Symantec   ST0-079   ST0-079

NO.12 What is the recommended hard-drive size for a scanner-only virtual machine?
A.60GB
B.80GB
C.100GB
D.160GB
ANSWER: A

Symantec exam   ST0-079   ST0-079 questions   ST0-079

NO.13 What is the minimum required memory size for virtual machine deployments?
A.1GB
B.2GB
C.4GB
D.6GB
ANSWER: B

Symantec test questions   ST0-079   ST0-079

NO.14 Which service retrieves new and updated email filters from Symantec Security Response through
HTTPS file transfer?
A.LiveUpdate
B.Conduit
C.Brightmail Engine
D.MTA
ANSWER: B

Symantec   ST0-079 test answers   ST0-079 dumps   ST0-079   ST0-079

NO.15 Which two tasks are performed by the SMTP session component of the MTA? (Select two.)
A.It verifies the IP address reputation with the BMServer.
B.It performs aliasing/masquerading for messages.
C.It reports the message as spam.
D.It applies the specified queue thresholds.
E.It interacts with the BMServer to access the filtering modules.
ANSWER: BD

Symantec   ST0-079 exam   ST0-079 practice test

NO.16 In addition to storing messages for Spam Quarantine and Suspect Virus Quarantine, which type of
messages can the Control Center store?
A.notification messages
B.compliance triggered messages
C.delivered messages
D.deleted messages
ANSWER: B

Symantec braindump   ST0-079   ST0-079   ST0-079   ST0-079

NO.17 To reach Message Audit logs, which tab should be selected in the Brightmail Control Center?
A.Status
B.Administration
C.Reports
D.Compliance
ANSWER: A

Symantec   ST0-079   ST0-079   ST0-079

NO.18 Spam Rule sets are automatically downloaded from Symantec on a regular basis.
How often are these rule sets refreshed?
A.every 5 to 10 minutes
B.every 30 to 60 minutes
C.every 3 to 5 hours
D.every day
ANSWER: A

Symantec exam simulations   ST0-079   ST0-079 original questions   ST0-079 questions   ST0-079

NO.19 Which MTA operation is used if queues need to be drained to remove a host from use and continue
scanning and delivery of messages?
A.Accept and deliver messages normally
B.Pause message scanning and delivery
C.Do not accept incoming messages
D.Accept but do not scan incoming messages
ANSWER: C

Symantec   ST0-079   ST0-079 original questions

NO.20 An administrator has navigated through Status -> LDAP Synchronization.
Which tab will display details about an LDAP Synchronization?
A.LDAP to Scanners
B.LDAP to CC
C.LDAP Status
D.CC to LDAP
ANSWER: B

Symantec test questions   ST0-079 test   ST0-079

IT-Tests.com offer the latest IIA-CCSA Questions & Answers and high-quality 000-657 PDF Practice Test. Our 1Z0-061 VCE testing engine and 70-583 study guide can help you pass the real exam. High-quality NS0-145 Real Exam Questions can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.it-tests.com/ST0-079.html

2014年2月11日星期二

Free download of the best Symantec certification ST0-079 exam training materials

After the advent of the IT-Tests's latest Symantec certification ST0-079 exam practice questions and answers, passing Symantec certification ST0-079 exam is no longer a dream of the IT staff. All of IT-Tests's practice questions and answers about Symantec certification ST0-079 exam have high quality and 95% similarity with the real exam questions. IT-Tests.com is worthful to choose. If you choose IT-Tests's products, you will be well prepared for Symantec certification ST0-079 exam and then successfully pass the exam.

The site of IT-Tests.com is well-known on a global scale. Because the training materials it provides to the IT industry have no-limited applicability. This is the achievement made by IT experts in IT-Tests.com after a long period of time. They used their knowledge and experience as well as the ever-changing IT industry to produce the material. The effect of IT-Tests.com's Symantec ST0-079 exam training materials is reflected particularly good by the use of the many candidates. If you participate in the IT exam, you should not hesitate to choose IT-Tests.com's Symantec ST0-079 exam training materials. After you use, you will know that it is really good.

As a main supplier for IT certification exam training. IT-Tests's IT experts continually provide you the high quality product and a free online customer service, but also update the exam outline with the fastest speed.

All the IT professionals are familiar with the Symantec ST0-079 exam. And everyone dreams pass this demanding exam. Symantec ST0-079 exam certification is generally accepted as the highest level. Do you have it? About the so-called demanding, that is difficult to pass the exam. This does not matter, with the IT-Tests.com's Symantec ST0-079 exam training materials in hand, you will pass the exam successfully. You feel the exam is demanding is because that you do not choose a good method. Select the IT-Tests.com, then you will hold the hand of success, and never miss it.

In recent years, fierce competition agitates the forwarding IT industry in the world. And IT certification has become a necessity. If you want to get a good improvement in your career, The method that using the IT-Tests.com’s Symantec ST0-079 exam training materials to obtain a certificate is very feasible. Our exam materials are including all the questions which the exam required. So the materials will be able to help you to pass the exam.

Exam Code: ST0-079
Exam Name: Symantec (Symantec Brightmail Gateway 8.0 (STS))
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Total Q&A: 114 Questions and Answers
Last Update: 2014-02-11

What are you waiting for? Opportunity knocks but once. You can get Symantec ST0-079 complete as long as you enter IT-Tests.com website. You find the best ST0-079 exam training materials, with our exam questions and answers, you will pass the exam.

ST0-079 (Symantec Brightmail Gateway 8.0 (STS)) Free Demo Download: http://www.it-tests.com/ST0-079.html

NO.1 An administrator has navigated through Status -> LDAP Synchronization.
Which tab will display details about an LDAP Synchronization?
A.LDAP to Scanners
B.LDAP to CC
C.LDAP Status
D.CC to LDAP
ANSWER: B

Symantec answers real questions   ST0-079   ST0-079   ST0-079 practice test

NO.2 True file typing is a feature used to combat which behavior?
A.spamming
B.renaming
C.phishing
D.spimming
ANSWER: B

Symantec certification training   ST0-079   ST0-079   ST0-079   ST0-079 certification training

NO.3 Which feature requires Invalid Recipient Handling to be enabled?
A.Bounce Attack Prevention
B.Directory Harvest Attack recognition
C.Reputation Lookup
D.Fastpass
ANSWER: B

Symantec   ST0-079 demo   ST0-079 demo   ST0-079   ST0-079

NO.4 What happens to a message that is forwarded to the Suspect Virus Quarantine?
A.It is automatically deleted after one week.
B.It is rescanned when the configured hold time has elapsed.
C.It is placed in the administrator's queue for review.
D.It is forwarded to Symantec Security Response.
ANSWER: B

Symantec   ST0-079   ST0-079 certification training   ST0-079   ST0-079 test answers   ST0-079

NO.5 What are two parts of the Control Center? (Select two.)
A.Message Store
B.LDAP Sync Service
C.Brightmail Engine
D.LiveUpdate Conduit
E.Suspect Virus Quarantine
ANSWER: BE

Symantec   ST0-079 pdf   ST0-079 exam dumps   ST0-079 test answers   ST0-079   ST0-079

NO.6 Which MTA operation is used if incoming messages need to be stopped while waiting for new virus
definitions?
A.Accept and deliver messages normally
B.Pause message scanning and delivery
C.Do not accept incoming messages
D.Accept but do not scan incoming messages
ANSWER: B

Symantec certification training   ST0-079   ST0-079 test answers   ST0-079 exam simulations   ST0-079 practice test

NO.7 A client needs to import structured customer data.
Which resource is used for this requirement?
A.records
B.dictionaries
C.regular expressions
D.patterns
ANSWER: A

Symantec   ST0-079   ST0-079   ST0-079

NO.8 What are two functions of the Control Center? (Select two.)
A.It provides message management services.
B.It routes messages for delivery.
C.It hosts Spam Quarantine.
D.It downloads virus definitions.
E.It runs filters.
ANSWER: AC

Symantec pdf   ST0-079   ST0-079   ST0-079 test questions

NO.9 Which MTA operation is used if queues need to be drained to remove a host from use and continue
scanning and delivery of messages?
A.Accept and deliver messages normally
B.Pause message scanning and delivery
C.Do not accept incoming messages
D.Accept but do not scan incoming messages
ANSWER: C

Symantec test questions   ST0-079 demo   ST0-079

NO.10 Spam Rule sets are automatically downloaded from Symantec on a regular basis.
How often are these rule sets refreshed?
A.every 5 to 10 minutes
B.every 30 to 60 minutes
C.every 3 to 5 hours
D.every day
ANSWER: A

Symantec   ST0-079 exam   ST0-079   ST0-079 study guide   ST0-079 pdf

NO.11 What does the Fastpass feature do?
A.skips virus scanning for known viruses
B.skips resource intensive spam scanning steps
C.passes incoming mail directly to the downstream MTA
D.bypasses scanning on outgoing mail
ANSWER: B

Symantec   ST0-079   ST0-079

NO.12 To reach Message Audit logs, which tab should be selected in the Brightmail Control Center?
A.Status
B.Administration
C.Reports
D.Compliance
ANSWER: A

Symantec   ST0-079   ST0-079   ST0-079

NO.13 Which feature of Symantec Brightmail Gateway 8.0 detects Non-Delivery Reports (NDR) created by an
attacker?
A.Directory Harvest Attack
B.Anti-Phishing Filter
C.Bounce Attack Prevention
D.Symantec Probe Network
ANSWER: C

Symantec test questions   ST0-079   ST0-079 exam prep   ST0-079   ST0-079

NO.14 What is the recommended hard-drive size for a scanner-only virtual machine?
A.60GB
B.80GB
C.100GB
D.160GB
ANSWER: A

Symantec   ST0-079   ST0-079

NO.15 Which two email authentication technologies are included in Symantec Brightmail Gateway 8.0?
(Select two.)
A.Sender ID
B.POP before SMTP
C.Domain Keys Identified Mail (DKIM)
D.Certified Email
E.Sender Policy Framework (SPF)
ANSWER: AE

Symantec   ST0-079 practice test   ST0-079 test questions   ST0-079

NO.16 What is the minimum required memory size for virtual machine deployments?
A.1GB
B.2GB
C.4GB
D.6GB
ANSWER: B

Symantec exam dumps   ST0-079   ST0-079   ST0-079 certification training

NO.17 What is the Heuristic Detection (Bloodhound) feature designed to detect?
A.unknown viruses
B.fuzzy matches against compliance rules
C.regex matches
D.Denial of Service (DoS) attacks
ANSWER: B

Symantec exam simulations   ST0-079   ST0-079 study guide   ST0-079

NO.18 In addition to storing messages for Spam Quarantine and Suspect Virus Quarantine, which type of
messages can the Control Center store?
A.notification messages
B.compliance triggered messages
C.delivered messages
D.deleted messages
ANSWER: B

Symantec original questions   ST0-079 dumps   ST0-079 questions

NO.19 Which service retrieves new and updated email filters from Symantec Security Response through
HTTPS file transfer?
A.LiveUpdate
B.Conduit
C.Brightmail Engine
D.MTA
ANSWER: B

Symantec   ST0-079   ST0-079   ST0-079 study guide   ST0-079 test answers

NO.20 Which two tasks are performed by the SMTP session component of the MTA? (Select two.)
A.It verifies the IP address reputation with the BMServer.
B.It performs aliasing/masquerading for messages.
C.It reports the message as spam.
D.It applies the specified queue thresholds.
E.It interacts with the BMServer to access the filtering modules.
ANSWER: BD

Symantec   ST0-079 dumps   ST0-079

IT-Tests.com offer the latest 70-342 Questions & Answers and high-quality NS0-155 PDF Practice Test. Our VCPC510 VCE testing engine and 1Z0-466 study guide can help you pass the real exam. High-quality 00M-670 Real Exam Questions can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.it-tests.com/ST0-079.html

2013年8月18日星期日

Latest Symantec ST0-025 250-401 250-400 ST0-10X ST0-079 of exam practice questions and answers

IT-Tests.com's Symantec ST0-025 250-401 250-400 ST0-10X ST0-079 exam training materials are the necessities of each of candidates who participating in the IT certification. With this training material, you can do a full exam preparation. So that you will have the confidence to win the exam. IT-Tests.com's Symantec ST0-025 250-401 250-400 ST0-10X ST0-079 exam training materials are highly targeted. Not every training materials on the Internet have such high quality. Only IT-Tests.com could be so perfect.


We all know that in the fiercely competitive IT industry, having some IT authentication certificates is very necessary. IT authentication certificate is a best proof for your IT professional knowledge and experience. Symantec ST0-025 250-401 250-400 ST0-10X ST0-079 is a very important certification exam in the IT industry and passing Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam is very difficult. But in order to let the job position to improve spending some money to choose a good training institution to help you pass the exam is worthful. IT-Tests's latest training material about Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam have 95% similarity with the real test. If you use IT-Tests'straining program, you can 100% pass the exam. If you fail the exam, we will give a full refund to you.


From IT-Tests.com website you can free download part of IT-Tests's latest Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam practice questions and answers as a free try, and it will not let you down. IT-Tests.com latest Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam practice questions and answers and real exam questions is very close. You may have also seen on other sites related training materials, but will find their Source IT-Tests.com of you carefully compare. The IT-Tests.com provide more comprehensive information, including the current exam questions, with their wealth of experience and knowledge by IT-Tests.com team of experts to come up against Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam.


Exam Code: ST0-025

Exam Name: Symantec (Symantec Security Information Manager 4.5 (STS))

Exam Code: 250-401

Exam Name: Symantec (Administration of Symantec Management Platform 7.0 with Notification Server)

Exam Code: 250-400

Exam Name: Symantec (Administration of Altiris Client Management Suite 7.0)

Exam Code: ST0-10X

Exam Name: Symantec (Veritas Storage Foundation 5 for Unix (STS))

Exam Code: ST0-079

Exam Name: Symantec (Symantec Brightmail Gateway 8.0 (STS))

ST0-025 250-401 250-400 ST0-10X ST0-079 is an Symantec certification exam, so ST0-025 250-401 250-400 ST0-10X ST0-079 is the first step to set foot on the road of Symantec certification. ST0-025 250-401 250-400 ST0-10X ST0-079 certification exam become more and more fiery and more and more people participate in ST0-025 250-401 250-400 ST0-10X ST0-079 exam, but passing rate of ST0-025 250-401 250-400 ST0-10X ST0-079 certification exam is not very high.When you select ST0-025 250-401 250-400 ST0-10X ST0-079 exam, do you want to choose an exam training courses?


Now it is a society of abundant capable people, and there are still a lot of industry is lack of talent, such as the IT industry is quite lack of technical talents. Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam is one of testing IT technology certification exams. IT-Tests.com is a website which provide you a training about Symantec certification ST0-025 250-401 250-400 ST0-10X ST0-079 exam related technical knowledge.


ST0-025 (Symantec Security Information Manager 4.5 (STS)) Free Demo Download: http://www.it-tests.com/ST0-025.html


NO.1 What information does the Correlation Manager use to identify and prioritize incidents?
A. DeepSight
B. event history
C. incident
D. assets
Answer: D

Symantec test questions   ST0-025   ST0-025   ST0-025   ST0-025

NO.2 By default, event archives are stored for up to _____ days.
A. 10
B. 30
C. 60
D. 90
Answer: A

Symantec exam   ST0-025   ST0-025 certification   ST0-025

NO.3 What are on-box collectors?
A. PIX, UNIX Syslog and Sygate
B. Checkpoint, Snort and PIX
C. PIX, Snort and Symantec Mail Security
D. Checkpoint, UNIX Syslog and Symantec Network Security
Answer: B

Symantec demo   ST0-025 dumps   ST0-025

NO.4 Which Symantec Security Information Manager component retrieves security content from Symantec?
A. LiveUpdate
B. LiveUpdate and licensed DeepSight Integration Module simultaneously
C. Licensed DeepSight Integration Module
D. Security content retrieval is automatic.
Answer: C

Symantec   ST0-025   ST0-025 test answers

NO.5 When querying archived event data, how can you make a query available to other users of the system?
A. save it in Published Queries
B. save it in Public Templates
C. grant Read Query permission to the domain
D. check the Shared option on the saved query
Answer: A

Symantec study guide   ST0-025   ST0-025 original questions

NO.6 What is the correct Symantec Security Information Manager incident identification pipeline?
A. collection --> normalization --> rule processing --> attack tracing --> correlation to vulnerabilities -->
incident prioritization
B. normalization --> collection --> rule processing --> attack tracing --> correlation to vulnerabilities -->
incident prioritization
C. rule processing --> normalization --> collection --> attack tracing --> correlation to vulnerabilities -->
incident prioritization
D. attack tracing --> rule processing --> normalization --> collection --> correlation to vulnerabilities -->
incident prioritization
Answer: A

Symantec original questions   ST0-025   ST0-025 practice test   ST0-025

NO.7 Events that are filtered out remain stored in the ______.
A. Event Logger
B. Incident Repository
C. Event Archive
D. Incident History
Answer: D

Symantec   ST0-025   ST0-025   ST0-025   ST0-025   ST0-025 exam dumps

NO.8 Which menu options do you select in the user interface to shut down or reboot the Symantec Security
Information Manager (SSIM) appliance?
A. System --> Shutdown/Restart
B. SSIM Console --> Shutdown/Restart
C. SSIM --> Configure Appliance --> Shutdown/Restart
D. SSIM Console --> Systems tab
Answer: C

Symantec test answers   ST0-025   ST0-025 test answers   ST0-025   ST0-025 questions

NO.9 How can you determine which ports are potentially vulnerable on a given host in the Assets Table?
A. by running the NetScan user action on the asset
B. by looking at the Services tab on the asset
C. by viewing the Details tab for the asset
D. by running the Host Information report on the asset
Answer: B

Symantec   ST0-025 exam prep   ST0-025 exam simulations   ST0-025 answers real questions

NO.10 What is Device-level aggregation?
A. parsing data with data sensors
B. grouping data to reduce traffic and database size
C. forwarding event data to the appliance
D. event and log sensoring
Answer: B

Symantec answers real questions   ST0-025   ST0-025 dumps   ST0-025 pdf   ST0-025

NO.11 What are two ways in which new entries can be added to the Assets Table of a Symantec Security
Information Manager solution? (Choose two.)
A. through the Lookup Tables pane of the Information Manager Console
B .importing from HP OpenView through the OpenView Integration feature
C. importing from a .CSV file exported from Active Directory
D. automatic population through a supported vulnerability scanner
Answer: C, D

Symantec   ST0-025   ST0-025   ST0-025

NO.12 Which two are commonly used to view archived events? (Choose two.)
A. Information Manager Event Viewer
B. Archive Management Console tab
C. Query Wizard
D. Incident Management Console tab
Answer: A, C

Symantec   ST0-025   ST0-025

NO.13 Security data is continuously gathered from thousands of security sensors worldwide through the
integrated _____.
A. Symantec Security Information Manager
B. DeepSight Global Intelligence Network
C. Symantec Enterprise Security Manager
D. Symantec Sygate Solution
Answer: B

Symantec test answers   ST0-025 demo   ST0-025   ST0-025 certification   ST0-025 exam simulations   ST0-025

NO.14 Where do you configure LiveUpdate for Symantec Security Information Manager (SSIM)?
A. SSIM Start Page --> Configure Appliance --> LiveUpdate tab
B. SSIM Console --> Systems tab --> LiveUpdate tab
C. from a command prompt
D. SSIM Client --> Maintenance tab --> LiveUpdate tab
Answer: A

Symantec   ST0-025 answers real questions   ST0-025   ST0-025 practice test

NO.15 Once custom rules are properly defined, the Correlation Engine _____.
A. correlates events against the rule criteria, analyzes conclusions and creates impending incidents
B. analyzes events against the rule criteria, correlates with existing conclusions and creates the
impending incident
C. analyzes events against the rule criteria, creates conclusions and correlates conclusions into incidents
D. applies individual rules to events, analyzes conclusions and correlates events into incidents
Answer: C

Symantec certification   ST0-025   ST0-025 practice test   ST0-025 answers real questions

NO.16 Normalization provides a unique identifier for each type of event and _____.
A. adds Correlation Manager-specific data to the translated incident
B. adds Correlation Manager-specific data to the translated event
C. maps events to a device-specific signature
D. maps incidents to a device-specific signature
Answer: B

Symantec   ST0-025   ST0-025 certification

NO.17 In Symantec Security Information Manager, collectors send events to _____.
A. Event Disposition
B. Event Archive
C. Event Reporting
D. Event Logger
Answer: D

Symantec   ST0-025   ST0-025 questions   ST0-025 test answers   ST0-025

NO.18 How do you install the Symantec Security Information Manager (SSIM) Console?
A. on the SSIM DVD, go to Tools and install the client
B. go to the SSIM web interface, download the client and click Run
C. from the SSIM appliance, deploy the console to your machine
D. No installation is necessary because SSIM is a browser-based tool.
Answer: B

Symantec certification   ST0-025   ST0-025 test questions   ST0-025

NO.19 Which three ratings does the Information Manager Assets Table use to quantify the importance of the
device and help determine how to escalate security incidents related to that device? (Choose three.)
A. Confidentiality
B. Criticality
C. Availability
D. Priority
E. Integrity
Answer: A, C, E

Symantec pdf   ST0-025 exam simulations   ST0-025   ST0-025

NO.20 What is the purpose of normalization?
A. to minimize the number of events affecting multiple devices for the Correlation Manager to strategize
the events more quickly
B. to correlate events across multiple devices for the Correlation Manager to compare all events equally
C. to standardize events across multiple devices for the Correlation Manager to compare all events
equally
D. to process the events across multiple devices for the Correlation Manager to strategize the events
more quickly
Answer: C

Symantec   ST0-025 dumps   ST0-025 questions   ST0-025 exam prep   ST0-025 certification training