Symantec Symantec Certifications 250-428 Questions & Answers

• Question 111:

  What is a supported migration path for Symantec Endpoint Protection?

  A. Symantec Endpoint Protection Enterprise Edition 12.1 > Symantec Endpoint Protection Small Business Edition 12.1

  B. Symantec Endpoint Protection Small Business Edition 12.1 > Symantec Endpoint Protection Enterprise Edition 12.1

  C. Symantec Endpoint Protection 12.1 Enterprise Edition > Symantec Endpoint Protection 11.x Enterprise Edition

  D. Symantec Endpoint Protection Small Business Edition 12.1 > Symantec Endpoint Protection 11.x Small Business Edition

  Correct Answer: D

• Question 112:

  Which action can an administrator take to improve the Symantec Endpoint Protection Manager (SEPM) dashboard performance and report accuracy?

  A. Decreasing the number of content revisions to keep

  B. Lowering the client installation log entries

  C. Rebuilding database indexes

  D. Limiting the number of backups to keep

  Correct Answer: C

• Question 113:

  Refer to the exhibit.

  

  Which settings can impact the Files trusted count?

  A. SONAR settings in the Virus and Spyware Protection policy

  B. System Lockdown Whitelist in the Application and Device Control policy

  C. Insight settings in the Virus and Spyware Protection policy

  D. File Cache settings in the Virus and Spyware Protection policy

  Correct Answer: C

• Question 114:

  A company needs to forward log data from Data Center A to Data Center B during off peak hours only.

  How should the company architect its Symantec Endpoint Protection environment?

  A. Set up two sites and schedule replication between them during off peak hours

  B. Set up a single site and configure the clients to send their logs to the Manager during off peak hours

  C. Set up a Group Update Provider (GUP) at Data Center A and configure it to send logs during off peak hours

  D. Set up a LiveUpdate Server at Data Center A and configure it to send logs during off peak hours

  Correct Answer: D

• Question 115:

  You have just started a relayout operation in a live test environment, and you want to limit the impact of your work on concurrent testing activities. You also want to accommodate the need to constrain a relayout job's performance impact on concurrent activities.

  What would you do to perform this task?

  A. Use the "set iodelay" option of vxtask to throttle the VxVM task.

  B. Use the "set iowait" option of vxtask to throttle the VxVM task.

  C. Use the "set slow" option of vxtask to throttle the VxVM task.

  D. Use the "set nice" option of vxtask to throttle the VxVM task.

  Correct Answer: C

• Question 116:

  Which two Symantec Endpoint Protection components are used to distribute content updates? (Select two.)

  A. Group Update Provider (GUP)

  B. Shared Insight Cache Server

  C. Symantec Protection Center

  D. Symantec Endpoint Protection Manager

  E. Symantec Insight Database

  Correct Answer: AD

• Question 117:

  A Symantec Endpoint Protection (SEP) administrator receives multiple reports that machines are experiencing performance issues. The administrator discovers that the reports happen about the same time as the scheduled LiveUpdate.

  Which setting should the SEP administrator configure to minimize I/O when LiveUpdate occurs?

  A. Change the LiveUpdate schedule

  B. Change the Administrator-defined scan schedule

  C. Disable Allow user-defined scans to run when the scan author is logged off

  D. Disable Run an Active Scan when new definitions arrive

  Correct Answer: D

• Question 118:

  A company uses a remote administration tool that is detected and quarantined by Symantec Endpoint Protection (SEP).

  Which step can an administrator perform to continue using the remote administration tool without detection by SEP?

  A. Create a Tamper Protect exception for the tool

  B. Create an Application to Monitor exception for the tool

  C. Create a Known Risk exception for the tool

  D. Create a SONAR exception for the tool

  Correct Answer: C

• Question 119:

  An administrator is re-adding an existing Replication Partner to the local Symantec Endpoint Protection Manager site.

  Which two parameters are required to re-establish this replication partnership? (Select two.)

  A. remote server IP Address and port

  B. remote site Encryption Password

  C. remote site Domain ID

  D. remote server Administrator credentials

  E. remote SQL database account credentials

  Correct Answer: AD

  References: https://support.symantec.com/en_US/article.TECH104455.html

• Question 120:

  What is a valid Symantec Endpoint Protection (SEP) single site design?

  A. Multiple MySQL databases

  B. One Microsoft SQL Server database

  C. One Microsoft SQL Express database

  D. Multiple embedded databases

  Correct Answer: A