EMT Practice Test

1. Question Content...

---

Question1: An administrator needs to determine which policies have triggered for a particular message. Which troubleshooting tool will help to identify issues with policy precedence and actions?

Question2: What is the maximum number of rows a report can have?

Question3: A customer receives large amounts of non-spam mail from thousands of different users, which consumes significant resources on Symantec Messaging Gateway 10.5. Which feature should be enabled to improve system performance while minimizing the risk of false positives?

Question4: Which log would an administrator access to determine why an email was deleted by the scanner?

Question5: An organization is receiving spam because of small targeted attacks from unknown senders. Which Symantec Messaging Gateway 10.5 feature should help slow down these types of attacks?

Question6: In addition to a configured seed, which other characteristic does Symantec Messaging Gateway 10.5 use to create a unique tag for Bounce Attack Prevention?

Question7: What is required before attempting installation of the Symantec Messaging Gateway 10.5 appliance?

Question8: Symantec Messaging Gateway 10.5 is running out of disk space due to storing extended logs. The administrator is required to store extended log data for more than a year. Which action should the administrator take?

Question9: Which Symantec Messaging Gateway 10.5 feature will change the original domain of an internal user relaying mail outside of an organization?

Question10: Which URL must be accessed to successfully register a newly added Symantec Messaging Gateway 10.5 license file?

Question11: An employee reports that a message sent to a customer was rejected. The employee provides sufficient information for the administrator to find the message using the Message Audit log. The employee wants to know why that message was blocked. Which section of the Message Audit Log detail page would provide this information?

Question12: Symantec Messaging Gateway 10.5 includes a policy-based encryption feature. How is this new feature licensed?

Question13: An administrator wants to ensure high performance and failover access between the LDAP servers and Symantec Messaging Gateway 10.5. Which configuration mode will help ensure this?

Question14: Which additional Email Reports Data collection must be enabled to track Top Probe Accounts via reports?

Question15: Which command line interface (CLI) command displays the update.log to check the progress of a software update of Symantec Messaging Gateway 10.5?

Question16: Which logs will help an administrator determine why antispam rules have failed to update?

Question17: Which two tasks can an end-user perform while logged in to the Control Center when authentication and address resolution are enabled? (Select two.)

Question18: Which feature, when enabled through the directory data sources, allows third party MTAs the ability to relay through Symantec Messaging Gateway 10.5 and protects it against becoming an open relay?

Question19: A Symantec Messaging Gateway 10.5 administrator needs to prevent bounce attacks. Where should the administrator enable this feature?

Question20: Which two can be used to verify that Symantec Messaging Gateway 10.5 is processing messages? (Select two)

Question21: How does enabling and configuring sender authentication options in Symantec Messaging Gateway 10.5 help to protect against spam?

Question22: Which TCP port is used for communication between the Control Center and the scanner(s)?

Question23: Symantec Messaging Gateway 10.5 will be deployed to receive mail directly from the Internet. In this situation, which option should be selected within the Inbound Mail Filtering - Accepted Hosts step of the site setup wizard?

Question24: Which MTA operation is used if queues need to be drained to remove a host from use and continue scanning and delivery of messages?

Question25: In which two situations are multiple group policies useful? (Select two.)

Question26: What is the source of information used to populate the Global Good and Global Bad senders list?

Question27: Probe accounts should be created from which source of email addresses?

Question28: Having received a targeted attack from a spoofed email domain, a company wants to take advantage of DKIM validation for inbound mail. The messaging administrator has enabled sender authentication and DKIM validation and now needs to configure a content filtering policy to quarantine any messages that fail.
Which condition should be met for the content filtering policy to fire?

Question29: What is the default report data retention period?

Question30: Before performing a software update on a scanner-only appliance, which MTA operation/mode should be chosen if there are messages in the queues?

Question31: With Fastpass enabled, which two verdicts may be excluded for messages with a pass? (Select two.)

Question32: Which two report file formats are available in Symantec Messaging Gateway 10.5 for executive summary reports? (Select two.)

Question33: What will trigger a spam policy by default in Symantec Messaging Gateway 10.5?

Question34: Which two instant messaging networks are supported in Symantec Messaging Gateway 10.5? (Select two.)

Question35: What is the default action taken during an email virus attack?

Question36: Which two options are valid for pre-configured actions for the language identification feature in Symantec Messaging Gateway 10.5? (Select two.)

Question37: Which listener accepts messages from the Brightmail Engine for carrying out actions based on the rendered verdicts?

Question38: Which directory data source function must be enabled to help prevent a directory harvest attack?

Question39: What is an advantage of Symantec Content Encryption over TLS encryption?

Question40: After a configurable period of time, a suspect virus is released from the Suspect Virus Quarantine. What happens to it next?

Question41: Which two functions of Symantec Messaging Gateway 10.5 can use information retrieved from a directory data source? (Select two.)

Question42: A company uses multiple control centers. What must be done to ensure legitimate NDRs are recognized by Bounce Attack Prevention across all scanners?

Question43: Where does an administrator specify how often a report is run?

Question44: An employee reports that a message sent to a customer was never received by the customer. The employee provides sufficient information for the administrator to find the message using the Message Audit log. The employee wants to know where that message has gone. Which section of the Message Audit log detail page will provide this information?

Question45: What happens to an IP listed in the Fastpass exclusions?

Question46: How could an administrator improve Control Center performance of Symantec Messaging Gateway 10.5?

Question47: When configuring remote logging, where are the logs redirected?

Question48: An organization has an extremely large LDAP database. What is done in Symantec Messaging Gateway
10.5 that will help prevent mail from backing up in the system during the initial directory building process?

Question49: What are two benefits of customer-specific spam rules? (Select two.)

Question50: When enabling Connection Classification, how many messages must be processed in learning mode before messages can be deferred?

Question51: Which Symantec Messaging Gateway 10.5 feature improves responsiveness to new spam threats and increases overall antispam effectiveness?

Question52: A Symantec Messaging Gateway 10.5 administrator is creating a new spam policy and needs to choose a message condition. Which two are valid message conditions? (Select two.)

Question53: What are two benefits of using attachment list policy resources in Symantec Messaging Gateway 10.5?
(Select two.)

Question54: An administrator recently investigated the debug logs for Symantec Messaging Gateway 10.5 and resolved an issue. A few days later the administrator discovers that the disk storage is filling up quickly. What is the likely cause?

Question55: Which two actions must be taken to allow end-users to create personal Good and Bad Senders lists?
(Select two.)

Question56: The Symantec Messaging Gateway 10.5 appliance will be deployed with the following topology:
Internet Default Gateway (10.10.10.1) <--> Email Gateway (10.10.10.11) <--> Symantec Messaging Gateway (10.10.10.21) <--> Internal Mail Server (10.10.10.31) Which IP address should be specified in the Mail Filtering - Non-local Mail Delivery page of the site setup wizard?

Question57: During the installation and configuration process, when will Symantec Messaging Gateway 10.5 require access to the network?

Question58: During which phase of inbound message flow does Symantec Messaging Gateway 10.5 accept, reject, or defer messages on the basis of the message envelope?

Question59: When should Connection Classification be enabled?

Question60: Which command is used to collect the configuration and log files from the command line interface (CLI)?

Question61: What should an administrator do before performing a software update of Symantec Messaging Gateway
10.5?

Question62: Which command allows the administrator to track messages from the command line interface (CLI)?

Question63: An organization would like to participate in the Symantec Probe Network without having to manually create decoy email accounts. The organization wants to make sure that the addresses that participate in the Symantec Probe Network are currently receiving email. Which directory data source function should be enabled to help in this situation?

Question64: How does Symantec DLP communicate with Symantec Messaging Gateway (SMG) to indicate what type of incident (if any) is related to a given message?

Question65: A diagnostics package for a scanner-only appliance can be generated from the GUI in Symantec Messaging Gateway 10.5. If the package is small (less than 5 MB), which transfer protocol type should be used by the administrator to verify the diagnostics package before providing it to technical support for analysis?

Question66: What happens to a message after it has been identified as a suspect virus and placed into the suspect virus quarantine?

Question67: Where are options for backup and restore of Symantec Messaging Gateway 10.5 located?