Ensurepass

Question 252

The Directory Scanner’s “uSNChanged” scanning technique’s execution time is dependent on all of the following EXCEPT:

A. Connection speed between the domain controller, directory scanner host and database host

B. The processor speed of the domain controller, directory scanner host and database host

C. Total number of objects in AD

D. Total number of objects in SmartCenter for Pointsec – MI’s database

 

Answer: D 

 

 

Question 253

Directory Scanner objects that are no longer in Active Directory are not being updated in SmartCenter for Pointsec – MI. The issue appears to be related to the initial configuration of the Directory Scanner Service Account. Which of the following is NOT the cause of the issue?

A. The Directory Scanner Service Account does not have Read Attributes permission set for the AD containers from root down.

B. The Directory Scanner Service Account is set as Log on as batch job.

C. The Directory Scanner Service Account does not have READ permissions for the AD DELETED OBJECTS container.

D. The Directory Scanner Service Account does not have READ permission set for all AD containers from root down.

 

Answer: B 

 

 

Question 254

If the LDAP search path in the Directory Scanner is changed, which of the following will always happen?

A. A full rescan of the Active Directory domain is performed

B. The Directory Scanner service automatically restarts and then performs a rescan of the Active Directory Domain

C. The Directory Scanner performs a rescan that searches for changes made from the SmartCenter for Pointsec – MI management console

D. The Directory Scanner’s polling time is reset, and it begins a rescan of the Active Directory Domain

 

Answer: A 

 

 

Question 255

Which of the following is NOT part of the subsequent scanning process after the initial scan of Active Directory?

A. The Directory Scanner triggers from the configured poll timer if there are no objects to replicate

B. The last uSNChanged value is stored in the database to allow for restarting the service without performing a full rescan

C. The uSNChanged Scan technique is always used

D. The uSNChanged value is reset for the next scan

 

Answer: D 

 

 

Question 256

Which of the following is NOT considered a task that SmartCenter for Pointsec – MI modules allow an administrator to carry out?

A. Provide Remote Help

B. Specify Security Settings

C. Deploy a security product to end user’s devices

D. Extended auditing of end user devices

 

Answer: D 

 

 

Question 257

In the MI Management Console, where are Security Modules and Device Agents (Optional) configured for downloading?

A. MI Database

B. Connection Point

C. Download Location

D. Secured Servers

 

Answer: C 

 

 

Question 258

Which of the following information is only visible when viewing a specific software module’s properties in the MI Management Console?

A. OU specific settings

B. Version Number

C. Configuration Settings

D. Version Name

 

Answer: C 

 

 

Question 259

Which of the following are the two types of modules listed in the MI Management Console?

A. “User Security” and “Device Security”

B. “Security Components” and “Management Components”

C. “Security Agents” and “Device Agents”

D. “Device Agents” and “Security Modules”

 

Answer: D 

 

 

Question 260

What is the primary purpose of the Virtual Directory Structure?

A. To act as a staging area for devices and/or users which are being added to the Active Directory scanned by SmartCenter for Pointsec – MI

B. To replicate OUs that part of the Active Directory scanned by SmartCenter for Pointsec – MI

C. To store devices and/or users which have been deemed to be a security risk to the Active Directory scanned by SmartCenter for Pointsec – MI

D. To list devices and/or users which are not part of the Active Directory scanned by SmartCenter for Pointsec – MI

 

Answer: D