Symantec Symantec Certifications 250-428 Questions & Answers

• Question 131:

  Which two items should an administrator enter in the License Activation Wizard to activate a license? (Select two.)

  A. password for the Symantec Licensing Site

  B. purchase order number

  C. serial number

  D. Symantec License file

  E. credit card number

  Correct Answer: CD

• Question 132:

  A user is unknowingly about to connect to a malicious website and download a known threat within a .rar file. All Symantec Endpoint Protection technologies are installed on the client's system.

  In which feature set order must the threat pass through to successfully infect the system?

  A. Download Insight, Firewall, IPS

  B. Firewall, IPS, Download Insight

  C. IPS, Firewall, Download Insight

  D. Download Insight, IPS, Firewall

  Correct Answer: B

• Question 133:

  An administrator is responsible for the Symantec Endpoint Protection architecture of a large, multi-national company with three regionalized data centers. The administrator needs to collect data from clients; however, the collected data must stay in the local regional data center. Communication between the regional data centers is allowed 20 hours a day.

  How should the administrator architect this organization?

  A. set up 3 domains

  B. set up 3 sites

  C. set up 3 locations

  D. set up 3 groups

  Correct Answer: A

  References: https://support.symantec.com/en_US/article.HOWTO80764.html

• Question 134:

  A Symantec Endpoint Protection administrator is using System Lockdown in blacklist mode with a file fingerprint list. When testing a client, the administrator notices that at least one of the files on the list is allowed to execute.

  What is the likely cause of the problem?

  A. The application has been upgraded.

  B. The Application and Device Control policy is in test mode.

  C. A file exception has been added to the Exceptions policy.

  D. The Application and Device Control policy is allowing the file to execute.

  Correct Answer: A

• Question 135:

  An administrator is unable to delete a location.

  What is the likely cause?

  A. The location currently contains clients.

  B. Criteria is defined within the location.

  C. The administrator has client control enabled.

  D. The location is currently assigned as the default location.

  Correct Answer: D

• Question 136:

  Which object in the Symantec Endpoint Protection Manager console describes the most granular level to which a policy can be assigned?

  A. Group

  B. Computer

  C. User

  D. Client

  Correct Answer: A

• Question 137:

  An administrator configures the scan duration for a scheduled scan. The scan fails to complete in the specified time period.

  When will the next scheduled scan occur on the computer?

  A. when the computer reboots

  B. when the user restarts the scan

  C. at the next scheduled scan period

  D. within the next hour

  Correct Answer: C

• Question 138:

  The Security Status on the console home page is failing to alert a Symantec Endpoint Protection (SEP) administrator when virus definitions are out of date.

  How should the SEP administrator enable the Security Status alert?

  A. Lower the Security Status thresholds

  B. Raise the Security Status thresholds

  C. Change the Notifications setting to “Show all notifications”

  D. Change the Action Summary display to “By number of computers”

  Correct Answer: A

  References: https://support.symantec.com/en_US/article.HOWTO81151.html

• Question 139:

  An administrator is designing a new single site Symantec Endpoint Protection environment. Due to perimeter firewall bandwidth restrictions, the design needs to minimize the amount of traffic from content passing through the firewall.

  Which source must the administrator avoid using?

  A. Symantec Endpoint Protection Manager

  B. LiveUpdate Administrator (LUA)

  C. Group Update Provider (GUP)

  D. Shared Insight Cache (SIC)

  Correct Answer: B

• Question 140:

  What are two supported Symantec Endpoint Protection Manager authentication types? (Select two.)

  A. Microsoft Active Directory

  B. MS-CHAP

  C. RSA SecurID

  D. Biometrics

  E. Network Access Control

  Correct Answer: AC