Question 1

What is the source of information used to populate the Global Good and Global Bad senders list?

Accepted Answer

The Global Good and Global Bad senders list is populated using reputation data from the Symantec Global Intelligence Network, which provides comprehensive threat intelligence.

Question 2

Before performing a software update on a scanner-only appliance, which MTA operation/mode should be chosen if there are messages in the queues?

Accepted Answer

The answer of Before performing a software update on a...

Question 3

Which command line interface (CLI) command displays the update.log to check the progress of a software update of Symantec Messaging Gateway 10.5?

Accepted Answer

The "tail" command is used to display the last part of files, which is useful for viewing the most recent entries in the update.log file to check the progress of a software update.

Question 4

A customer receives large amounts of non-spam mail from thousands of different users, which consumes significant resources on Symantec Messaging Gateway 10.5. Which feature should be enabled to improve system performance while minimizing the risk of false positives?

Accepted Answer

Fastpass is a feature that allows trusted senders to bypass certain spam checks, improving system performance by reducing the processing load for known non-spam emails while minimizing the risk of false positives.

Question 5

What are two benefits of customer-specific spam rules? (Select two.)

Accepted Answer

Customer-specific spam rules allow for quick blocking of local or targeted attacks and provide fast protection against messages that may not be classified as spam by Symantec.

Question 6

By default, which port does Symantec Messaging Gateway 10.5 use to retrieve updated spam definitions?

Accepted Answer

Symantec Messaging Gateway 10.5 uses port 443 by default to retrieve updated spam definitions over HTTPS.

Question 7

What should an administrator do before performing a software update of Symantec Messaging Gateway 10.5?

Accepted Answer

The answer of What should an administrator do before performing...

Question 8

Which two instant messaging networks are supported in Symantec Messaging Gateway 10.5? (Select two.)

Accepted Answer

Symantec Messaging Gateway 10.5 supports Yahoo! and MSN Messenger as instant messaging networks.

Question 9

When enabling Connection Classification, how many messages must be processed in learning mode before messages can be deferred?

Accepted Answer

The answer of When enabling Connection Classification, how many messages...

Question 10

How could an administrator improve Control Center performance of Symantec Messaging Gateway 10.5?

Accepted Answer

Reducing the amount of reporting data can help improve performance by decreasing the load on the system resources used for data processing and storage.

Question 11

Which feature, when enabled through the directory data sources, allows third party MTAs the ability to relay through Symantec Messaging Gateway 10.5 and protects it against becoming an open relay?

Accepted Answer

SMTP authentication allows third party MTAs to relay through Symantec Messaging Gateway while ensuring that only authenticated users can send emails, thus preventing the system from becoming an open relay.

Question 12

Which Symantec Messaging Gateway 10.5 feature improves responsiveness to new spam threats and increases overall antispam effectiveness?

Accepted Answer

The answer of Which Symantec Messaging Gateway 10.5 feature improves...

Question 13

What will trigger a spam policy by default in Symantec Messaging Gateway 10.5?

Accepted Answer

The answer of What will trigger a spam policy by...

Question 14

An organization is receiving spam because of small targeted attacks from unknown senders. Which Symantec Messaging Gateway 10.5 feature should help slow down these types of attacks?

Accepted Answer

Connection classification helps slow down attacks by analyzing and classifying connections based on their behavior, which can help identify and mitigate spam from unknown senders.

Question 15

What happens to an IP listed in the Fastpass exclusions?

Accepted Answer

The answer of What happens to an IP listed in...

Question 16

When should Connection Classification be enabled?

Accepted Answer

Connection Classification should be enabled when deployed at the edge of the network to help manage and classify incoming connections effectively.

Question 17

Symantec Messaging Gateway 10.5 is running out of disk space due to storing extended logs. The administrator is required to store extended log data for more than a year. Which action should the administrator take?

Accepted Answer

Configuring remote logging allows the administrator to store extended log data externally, thus freeing up space on the Symantec Messaging Gateway and enabling long-term storage without being limited by the appliance's disk capacity.

Question 18

Symantec Messaging Gateway 10.5 will be deployed to receive mail directly from the Internet. In this situation, which option should be selected within the Inbound Mail Filtering - Accepted Hosts step of the site setup wizard?

Accepted Answer

The answer of Symantec Messaging Gateway 10.5 will be deployed...

Question 19

An employee reports that a message sent to a customer was rejected. The employee provides sufficient information for the administrator to find the message using the Message Audit log. The employee wants to know why that message was blocked. Which section of the Message Audit Log detail page would provide this information?

Accepted Answer

The answer of An employee reports that a message sent...

Question 20

A diagnostics package for a scanner-only appliance can be generated from the GUI in Symantec Messaging Gateway 10.5. If the package is small (less than 5 MB), which transfer protocol type should be used by the administrator to verify the diagnostics package before providing it to technical support for analysis?

Accepted Answer

The administrator should use the "Download to desktop" option to easily verify and access the diagnostics package directly from their local machine before sending it to technical support.

Exam 4: Administration of Symantec ProxySG 6.7