Symantec 250-502 Exam - PassITexam.com

Free 250-502 Sample Questions:

1. Which two are true about Symantec Enterprise Firewall load balancing? (Choose two.)
A. shares traffic across gateways
B. traffic will be decreased across gateways
C. deployed in maximum cluster size of four gateways
D. deployed in maximum cluster size of eight gateways
Answer: AD

2. How do you ensure that Symantec Enterprise Firewall content filtering is based on a current list of restricted topics or sites?
A. Use LiveUpdate to download ratings list.
B. Purchase a third-party ratings subscription.
C. Download ratings lists from the Symantec Web site.
D. Configure a referral to an external site and content blocking service.
Answer: A

3. Which advantage do the Symantec Gateway Security 360 and 360R have over the 320?
A. two WAN ports
B. RADIUS support
C. stronger encryption
D. allow pass-through authentication
E. support gateway-to-gateway VPN tunnels
Answer: A

4. Your ISP provides a changing IP address. Which feature of Symantec Gateway Security 300 Series allows external connections by name?
A. BIND DNS client
B. BIND DNS server
C. Dynamic DNS client
D. Dynamic DNS server
Answer: C

5. What must be running to ensure that client workstations can connect to your network if you implement the Symantec Gateway Security 300 Series AntiVirus Policy Enforcement (AVpe)?
A. DNS
B. VPN
C. Symantec AntiVirus Corporate Edition
D. Symantec Enterprise Security Manager
E. Symantec Enterprise Security Architecture
Answer: C

6. What is the default IP address of the AntiVirus Scan Server on the Symantec Gateway Security 5400 Series?
A. inside address
B. service address
C. outside address
D. loopback address
Answer: D

7. Which protocol needs to be configured on the Symantec Gateway Security 5400 Series to scan for viruses in Web-based email?
A. IMAP
B. HTTP
C. POP3
D. SMTP
E. HTTPS
Answer: B

8. Which address is used to identify source and destination at the TCP/IP link layer?
A. IP
B. Port
C. Host
D. MAC
Answer: D

9. Which three addresses are non-routable on the public Internet? (Choose three.)
A. 10.45.35.234
B. 127.23.45.234
C. 172.14.35.45
D. 172.31.34.5
E. 234.12.23.134
Answer: ABD

10. Your ISP assigns you network 216.13.156.64/27. What is the maximum number of subnets you can create?
A. 4
B. 8
C. 16
D. 32
Answer: B

11. Your ISP assigns you network 216.13.156.64/27. What is the maximum number of hosts you can have?
A. 30
B. 32
C. 62
D. 64
Answer: A

12. How many host IP addresses can a network with a subnet mask of 255.255.255.192 support?
A. 62
B. 64
C. 126
D. 128
Answer: A

13. Which two protocols are types of VPN encapsulation methods? (Choose two.)
A. L2TP
B. SLIP
C. IPSec
D. CHAP
E. PPPoE
Answer: AC

14. Which two methods are used by VPN technology to ensure data integrity? (Choose two.)
A. AES
B. MD5
C. SHA1
D. 3DES
Answer: BC

15. Which security technology supports encryption and encapsulation to ensure that data cannot be compromised in transit?
A. PKI
B. VPN
C. RADIUS
D. Kerberos
Answer: B

16. Which two methods are used by VPN technology to ensure data confidentiality? (Choose two.)
A. AES
B. MD5
C. SHA1
D. 3DES
Answer: AD

17. Which three can a proxy-based firewall do? (Choose three.)
A. hide addresses on the internal network
B. track each connection across all interfaces
C. inspect encrypted traffic at the application layer
D. allow for logging of events at the application layer
Answer: ABD

18. Which three layers can a firewall use to process network traffic? (Choose three.)
A. network
B. physical
C. data link
D. transport
Answer: ACD

19. Which firewall technology can inspect packets at the application layer?
A. SOCKS
B. proxy-based
C. circuit level gateway
D. stateful packet filtering
Answer: B

20. What is another term commonly used for NAT?
A. IP spoofing
B. IP masquerading
C. IP address proxying
D. IP packet address translation
Answer: B

21. Your customer has configured their internal network to use the 64.124.0.0/16 network and is using NAT to route to the Internet. They are complaining that the Symantec LiveUpdate service is not functioning properly. How should you fix the problem?
A. Configure the NAT to use dynamic DNS.
B. Configure the NAT to route the 64.124.0.0/16 network to the Internet.
C. Reconfigure the internal network to use an accepted private network address.
D. Add a static route from the 64.124.0.0/16 network to the Symantec LiveUpdate servers.
Answer: C

22. Which three are true about Symantec Enterprise Firewall load balancing? (Choose three.)
A. enhances throughput
B. can be used for failover
C. configured using the SGMI
D. has a maximum cluster size of four
Answer: ABC

23. Which two statements are true about Symantec Enterprise Firewall management? (Choose two.)
A. Security Gateway Management Interface (SGMI) replaces the Symantec Raptor Management console.
B. Local management is done through SGMI.
C. Policy configuration can only be done through the SESA Console.
D. Symantec Event Manager for Security Gateways is available as a plug-in for SGMI.
Answer: AB

24. Which three statements are true about Security Gateway Management Interface (SGMI)? (Choose three.)
A. It can be used to view active connections.
B. It can be used to configure the security gateway as a DNS server.
C. It pushes configuration data to multiple cluster nodes automatically.
D. It provides centralized logging, alerting, and reporting with the Symantec Event Manager for Security Gateways plug-in.
Answer: ABC

25. Which three notification methods can be configured via the Security Gateway Management Interface (SGMI)? (Choose three.)
A. fax
B. SMS
C. pager
D. SNMP
E. client program
Answer: CDE

26. In which two formats are Symantec Enterprise Firewall reports available? (Choose two.)
A. XML
B. PDF
C. email
D. HTML
Answer: BD

27. Which three are shipped with Symantec Enterprise Firewall? (Choose three.)
A. pre-configured IPSec/IKE policies
B. pre-configured IPSec/IPv4 policies
C. pre-configured IPSec/Static policies
D. a single Symantec Client VPN license
Answer: ACD

28. Which three Symantec Enterprise Firewall wizards are available for configuring VPN? (Choose three.)
A. Remote Policy Wizard
B. Global IKE Policy Wizard
C. Client-to-Gateway Tunnel Wizard
D. Gateway-to-Gateway Tunnel Wizard
Answer: ACD

29. Which three conditions must be met on each firewall when configuring a Symantec Enterprise Firewall cluster? (Choose three.)
A. same OS version
B. same hardware platform
C. same external IP address
D. multimode fiber interfaces
E. same number of node licenses
Answer: ABE

30. Which two methods can you use to limit Symantec Enterprise Firewall VPN tunnel traffic? (Choose two.)
A. Pass traffic to proxies.
B. Modify the global IKE policy.
C. Create a filter and apply it to an interface.
D. Create a filter and apply it to the VPN policy.
Answer: AD