250-530 Exam Questions

When creating a firewall rule, which two logging options are allowed? (Choose two.)

You need to create a firewall rule that allows all communications during the week, but blocks all communications on the weekend. Which approach accomplishes this?

Lifeline Supply Company mandates that all employees use VPN connections from one vendor. Previously there were several different vendor VPNs used throughout the company. Which fire...

You need to create a firewall rule that allows Internet Explorer to communicate to any website, but only on port 80 or 443. Which two triggers in the firewall rule should be used?...

Lifeline Supply Company's current corporate firewall policy blocks all traffic unless specifically allowed. It has a new custom application that communicates from an ephemeral port...

You have created a firewall policy that allows certain applications and blocks others. However, some applications are being blocked that should be allowed. Which log should you vie...

Based on the rules in the exhibit, what happens if the rule set is applied?

On what can administrator authentication be based?

An administrator is testing both firewall rules and Device Control. The administrator configures Symantec 250-530 Exam the firewall to allow HTTP traffic and configures Device Cont...

In the firewall included in Symantec Network Access Control, which methodology does the firewall use to determine precedence in rule evaluation?

A computer is configured in Client Control mode. The administrator creates and applies a firewall policy to Computer1 that has a rule that allows FTP traffic above the blue line an...

A computer is configured in Mixed Control mode. The administrator creates and applies a firewall policy to the computer that has a rule that allows FTP traffic above the blue line...

Symantec 250-530 Exam Smart Filters for DHCP and DNS have been enabled on all clients. The administrator creates and assigns a firewall policy that blocks DNS for computers in the...

When a client is in Mixed control mode, in which order are the firewall rules processed? (Choose two.)

When a firewall defends against a MAC spoof attack, what does it drop?

Which type of backup file does the Symantec Network Access Control Manager database backup create?

What is a function of DNS smart traffic filtering?

What is the function of DHCP smart traffic filtering?

What is the function of WINS smart traffic filtering?

What happens when you mark the "Enable NetBIOS Protection" checkbox?

A company is having trouble with unwanted applications consuming network bandwidth. Which policy type restricts these applications from accessing the network?

What is a possible use for a Custom IPS signature? Symantec 250-530 Exam

Symantec Network Access Control Intrusion Prevention signatures are based on which standard?

What can be configured for an Intrusion Prevention Policy? (Choose three.)

Which statement is true about Intrusion Prevention?

Which two engines does Symantec Intrusion Prevention contain that identify attack signatures? (Choose two.)

Which two statements are true about custom IPS signatures? (Choose two.)

What are two uses of Application Control? (Choose two.)

Which criteria can be used to define a process when creating an Application Control rule? (Choose three.)

An administrator wants to create an Application Control rule that prevents notepad.exe from being executed from the command prompt, but allows the command prompt to remain running....

An administrator creates an Application Control policy that prevents notepad.exe from being executed. After verifying the policy has been applied to the client, the administrator n...

Which two actions can an administrator take using Symantec Network Access Control to prevent files from being copied to a USB storage device? (Choose two.)

Which statement is true about Device Control when creating installation packages?

What is the correct order of operations to enable learned applications for a client?

What is one reason for disabling learned applications?

Which three criteria can be used to narrow the search for an application? (Choose three.)

The administrator enabled the upload of a list of applications that clients ran, however, the list is empty. What is the cause of the problem?

After a site has been enabled to collect lists of applications from the clients, you can configure the management server to upload the data. From which two levels can application l...

When defining location switching conditions, which three criteria are valid? (Choose three.)

If configured correctly, which statement is true about Location Awareness?

When can you delete a location?

When creating locations with multiple criteria, which operand is valid?

When using location awareness, when will the default location be used? (Choose two.)

Lifeline Supply Company has one Symantec Network Access Control Manager (SEPM) and protects all computers using a computer based policy. Only Technical Support personnel have a les...

Which log type displays configured firewall connections?

Which log contains information about who made policy changes to the Symantec Network Access Control Manager?

Which two statements are true about log filters? (Choose two.)

Which log can have the most significant performance impact on Symantec Network Access Control Manager?

What are three characteristics of external logging? (Choose three.)

A manager complains that a specific Windows 2003 server slows down every day at 10:00 am. You decide to review the logs from the Symantec Network Access Control Manager. Which thre...