Easily Pass By Training Lead2pass Latest Dumps
Lead2pass Microsoft, Cisco, CompTIA, IBM and other IT exam dumps with VCE and PDF
QUESTION 111
You are installing the Symantec Security Information Manager Agent on a Windows platform.
A. c:\Symantec\log
B. c:\Program Files\Symantec\log
C. c:\Program Files\Symantec\sesa\agent\log
D. c:\Symantec\agent\log
Answer: C
QUESTION 101
When troubleshooting the installation of Symantec Security Information Manager (SSIM), the “status” console command displays the status of which critical SSIM service?
A. Information Manager
B. DB2 database
C. Tomcat servlet engine
D. Apache web server
Answer: B
QUESTION 91
What are the specified minimum hardware requirements for installing and running the Symantec Security Information Manager Console?
A. 1 GB RAM and 1 GB disk space
B. 1 GB RAM and 512 MB disk space
C. 512 MB RAM and 1 GB disk space
D. 512 MB RAM and 103 MB disk space
Answer: D
QUESTION 81
What is the difference between Symantec Security Information Manager (SSIM) on-box and off- box collectors?
“Pass Any Exam. Any Time.” – www.actualtests.com 36
Symantec ST0-085 Exam
A. Off-box collectors are installed on the SSIM products and on-box collectors are installed on the appliance.
B. On-box collectors are installed prior to SSIM software installation and off-box collectors are installed separately.
C. On-box collectors are automatically installed with the SSIM software and off-box collectors are installed separately.
D. Off-box collectors are installed on the appliance and on-box collectors are installed on assets.
Answer: C
QUESTION 71
Symantec Security Information Manager automatically escalates security events into incidents based on a number of pre-defined and user-defined _____.
A. rules
B. events
C. incidents
D. tickets
Answer: A
QUESTION 61
Once data is archived and removed from Symantec Security Information Manager, what allows you to access that data?
A. Event Archive Viewer
B. Incident Archive Viewer
C. Correlated Event Viewer
D. Archive Log Viewer
Answer: A
QUESTION 51
For which two does Symantec Security Information Manager automatically create values when you manually create a new incident? (Select two.)
“Pass Any Exam. Any Time.” – www.actualtests.com 26
Symantec ST0-085 Exam
A. Event Creator
B. Incident Creator
C. Help desk ticket
D. Rule Name
E. Event ID number
Answer: BD
QUESTION 41
Which statement is true about rules in a Symantec Security Information Manager solution?
A. Rules can be created that escalate events to incidents, based on policies defined on each asset.
B. The Rules Editor can create policies on each asset to determine what rules are executed when an event occurs.
C. Rules can be configured on each asset that will launch a vulnerability scan when a specific type of event occurs.
D. The Rules tab can be used on the console to automatically identify available ports on an asset.
Answer: A