Which step is unnecessary when an administrator creates an application rule set?

A. define a provider

B. select a process to apply

C. select a process to exclude

D. define rule order

An administrator is using the SylinkDrop tool to update a Symantec Endpoint Protection client install on a system. The client fails to migrate to the new Symantec Endpoint Protection Manager (SEPM), which is defined correctly in the Sylink.xml file that was exported from the SEPM.

Which settings must be provided with SylinkDrop to ensure the successful migration to a new Symantec Endpoint Protection environment with additional Group Level Security Settings?

A. -s "silent"

B. -t "Tamper Protect"

C. -r "reboot"

D. -p "password"

A Symantec Endpoint Protection (SEP) administrator receives multiple reports that machines are experiencing performance issues. The administrator discovers that the reports happen about the same time as the scheduled LiveUpdate.

Which setting should the SEP administrator configure to minimize I/O when LiveUpdate occurs?

A. Change the LiveUpdate schedule

B. Change the Administrator-defined scan schedule

C. Disable Allow user-defined scans to run when the scan author is logged off

D. Disable Run an Active Scan when new definitions arrive

An organization created the following locations for their endpoint:

Internet (for remote user with no VPN)

VPN (remote users connected to the corporate network)

LAN Ethernet

LAN Wifi

The corporate network and VPN users have internet traffic filtered through a Content Analysis Appliance and a Next-Gen Firewall.

Which location is the most exposed to malicious downloads and needs a higher security posture in the Virus and Spyware protection policy?

A. Internet

B. LAN Wifi

C. LAN Ethernet

D. VPN

An administrator needs to identify infected computers that require a restart to finish remediation of a threat. What steps in the SEPM should an administrator perform to identify and restart the systems?

A. View the Computer Status log to determine if any computers require a restart. Run a command from the SONAR log to restart computers.

B. View the Computer Status log to determine if any computers require a restart. Run a command from the Attack log to restart computers.

C. View the SONAR log to determine if any computers require a restart. Run a command from the Computer Status log to restart computers.

D. View the Computer Status log to determine if any computers require a restart. Run a command from the Risk log to restart computers.