Symantec Symantec Certifications 250-428 Questions & Answers

• Question 121:

  An administrator uses ClientSideClonePrepTool to clone systems and virtual machine deployment.

  What will the tool do when it is run on each system?

  A. Run Microsoft SysPrep and removes all AntiVirus/AntiSpyware definitions

  B. Disable Tamper Protect and deploys a Sylink.xml

  C. Add a new Extended File Attribute value to all existing files

  D. Remove unique Hardware IDs and GUIDs from the system

  Correct Answer: D

• Question 122:

  An administrator is using the SylinkDrop tool to update a Symantec Endpoint Protection client install on a system. The client fails to migrate to the new Symantec Endpoint Protection Manager (SEPM), which is defined correctly in the Sylink.xml file that was exported from the SEPM.

  Which settings must be provided with SylinkDrop to ensure the successful migration to a new Symantec Endpoint Protection environment with additional Group Level Security Settings?

  A. -s "silent"

  B. -t "Tamper Protect"

  C. -r "reboot"

  D. -p "password"

  Correct Answer: D

• Question 123:

  An administrator plans to implement a multi-site Symantec Endpoint Protection (SEP) deployment. The administrator needs to determine whether replication is viable without needing to make network firewall changes or change defaults in SEP.

  Which port should the administrator verify is open on the path of communication between the two proposed sites?

  A. 1433

  B. 2967

  C. 8014

  D. 8443

  Correct Answer: D

• Question 124:

  A Symantec Endpoint Protection (SEP) administrator is remotely deploying SEP clients, but the clients are failing to install on Windows XP.

  What are two possible reasons for preventing installation? (Select two.)

  A. Windows firewall is enabled.

  B. Internet Connection firewall is disabled.

  C. Administrative file shares are enabled.

  D. Simple file sharing is enabled.

  E. Clients are configured for DHCP.

  Correct Answer: AD

• Question 125:

  Which protection engine should an administrator enable in order to drop malicious vulnerability scans against a client system?

  A. SONAR

  B. Intrusion Prevention

  C. Tamper Protection

  D. Application and Device Control

  Correct Answer: B

• Question 126:

  An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear.

  What is the likely problem?

  A. The Learn applications that run on the client computers setting is disabled.

  B. The client computers already have exclusions for the applications.

  C. The Symantec Endpoint Protection Manager is installed on a Domain Controller.

  D. The clients are in a trusted Symantec Endpoint Protection domain.

  Correct Answer: A

• Question 127:

  What does SONAR use to reduce false positives?

  A. Virus and Spyware definitions

  B. File Fingerprint list

  C. Symantec Insight

  D. Extended File Attributes (EFA) table

  Correct Answer: C

  References: https://support.symantec.com/en_US/article.HOWTO80929.html

• Question 128:

  An organization employs laptop users who travel frequently. The organization needs to acquire log data from these Symantec Endpoint Protection clients periodically. This must happen without the use of a VPN.

  Internet routable traffic should be allowed to and from which component?

  A. Group Update Provider (GUP)

  B. LiveUpdate Administrator Server (LUA)

  C. Symantec Endpoint Protection Manager (SEPM)

  D. IT Analytics Server (ITA)

  Correct Answer: C

• Question 129:

  A Symantec Endpoint Protection (SEP) administrator performed a disaster recovery without a database backup.

  In which file should the SEP administrator add "scm.agent.groupcreation=true" to enable the automatic creation of client groups?

  A. settings.conf

  B. conf.properties

  C. catalina.out

  D. httpd.conf

  Correct Answer: B

  References: https://support.symantec.com/en_US/article.TECH160736.html

• Question 130:

  Which task is unavailable for administrative accounts that authenticate using RSA SecurID Authentication?

  A. reset forgotten passwords

  B. import organizational units (OU) from Active Directory

  C. configure external logging

  D. enable Session Based Authentication with Web Services

  Correct Answer: A