Symantec Symantec Certifications 250-428 Questions & Answers

• Question 101:

  Which option is unavailable in the Symantec Endpoint Protection console to run a command on the group menu item?

  A. Disable SONAR

  B. Scan

  C. Disable Network Threat Protection

  D. Update content and scan

  Correct Answer: A

• Question 102:

  After several failed logon attempts, the Symantec Endpoint Protection Manager (SFPM) has locked the default admin account. An administrator needs to make system changes as soon as possible to address an outbreak, but the admin account is the only account.

  Which action should the administrator lake to correct the problem with minimal impact to the existing environment?

  A. Wait 15 minutes and attempt to log on again

  B. Restore the SEPM from a backup

  C. Run the Management Server and Configuration Wizard to reconfigure the server

  D. Reinstall the SEPM

  Correct Answer: A

  Explanation: https://support.symantec.com/en_US/article.HOWTO80757.html

• Question 103:

  A Symantec Endpoint Protection administrator needs to prevent users from modifying files in a specific program folder that is on all client machines. What does the administrator need to configure?

  A. a file and folder exception in the Exception policy

  B. an application rule set in the Application and Device Control policy

  C. a file fingerprint list and System Lockdown

  D. the Tamper Protection settings for the client folder

  Correct Answer: B

• Question 104:

  An administrator is troubleshooting a Symantec Endpoint Protection (SEP) replication.

  Which component log should the administrator check to determine whether the communication between the two sites is working correctly?

  A. Apache Web Server

  B. Tomcat

  C. SQL Server

  D. Group Update Provider (GUP)

  Correct Answer: B

• Question 105:

  Which two options are available when configuring DNS change detected for SONAR? (Select two.)

  A. Block

  B. Active Response

  C. Quarantine

  D. Log

  E. Trace

  Correct Answer: AD

• Question 106:

  What is a function of the Symantec Endpoint Protection client?

  A. Uploads logs to the Shared Insight Cache

  B. Sends and receives application reputation ratings from LiveUpdate

  C. Downloads virus content updates from Symantec Insight

  D. Provides a Lotus Notes email scanner

  Correct Answer: D

  References: https://support.symantec.com/en_US/article.TECH95093.html

• Question 107:

  A managed service provider (MSP) is managing Symantec Endpoint Protection for a number of independent companies. Each company has administrators who will log in from time to time to add new clients. Administrators must be prevented from seeing the existence of other companies in the console.

  What should an administrator create for each independent company?

  A. Domain

  B. Location

  C. Group

  D. Site

  Correct Answer: A

• Question 108:

  Employees of an accounting company often take their notebooks to customer sites. The administrator needs to apply a different firewall policy when the notebooks are disconnected from the accounting company's network. What must the administrator configure to use the two different policies?

  A. Groups

  B. Domains

  C. Sites

  D. Locations

  Correct Answer: B

• Question 109:

  Which package type should an administrator use to reduce a SEP environment's footprint when considering that new SEP 14 clients will be installed on point of sale terminals?

  A. Default Standard client

  B. Default Embedded or VDI client

  C. Default dark network client

  D. Custom Standard client

  Correct Answer: B

  References: https://support.symantec.com/en_US/article.HOWTO125381.html

• Question 110:

  A company needs to configure an Application and Device Control policy to block read/write access to all USB removable media on its Symantec Endpoint Protection (SLP) systems. Which tool should an administrator use to format the GUID and device IDs as required by SEP?

  A. CheckSum.exe

  B. DevViewer.exe

  C. TaskMgr.exe

  D. DeviceTree.exe

  Correct Answer: B