Symantec Symantec Certifications 250-428 Questions & Answers

• Question 31:

  What are two methods the SEP Administrator can use for gathering a fingerprint list? (Choose two.)

  A. GatherSymantecInfo

  B. DevViewer

  C. Checksum

  D. DeviceInf

  E. Get File Fingerprint list command

  Correct Answer: CE

  Reference: https://www.symantec.com/connect/articles/how-collect-and-add-fingerprint-any-app-or-location-sep-manager-graphical

• Question 32:

  What Symantec Endpoint Protection component facilitates distributing content clients that have a poor connection to the Symantec Endpoint Protection Manager (SEPM)?

  A. Group Update Provider

  B. SEPM Replication

  C. LiveUpdate Administrator

  D. Shared Insight Cache Server

  Correct Answer: A

  Reference: https://support.symantec.com/us/en/article.howto80810.html

• Question 33:

  An organization has several remote locations with minimum bandwidth and would like to use a content distribution method that does NOT involve configuring an internal LiveUpdate server. What content distribution method should be utilized?

  A. Intelligent Updater

  B. Management Server

  C. External LiveUpdate

  D. Group Update Provider

  Correct Answer: A

  Reference: https://support.symantec.com/us/en/article.howto80888.html

• Question 34:

  An organization created the following locations for their endpoint:

  Internet (for remote user with no VPN)

  VPN (remote users connected to the corporate network)

  LAN Ethernet

  LAN Wifi

  The corporate network and VPN users have internet traffic filtered through a Content Analysis Appliance and a Next-Gen Firewall.

  Which location is the most exposed to malicious downloads and needs a higher security posture in the Virus and Spyware protection policy?

  A. Internet

  B. LAN Wifi

  C. LAN Ethernet

  D. VPN

  Correct Answer: A

• Question 35:

  An organization's Limited Administrator needs to create an exclusion. When the Limited Administrator logs in, they do NOT see Exceptions listed as an option on the Policies page. What setting should a System Administrator enable so the Limited Administrator could see Exceptions and create an exclusion?

  A. Edit the Limited Administrator properties and uncheck Do not allow editing of shared policies in the Access Rights tab

  B. Edit the Limited Administrator properties and link the Administrator to an Active Directory account with Administrator privileges in the Authentication tab

  C. Edit the Limited Administrator properties and ensure Exceptions is checked under Policy rights in Access Rights tab

  D. Edit the Limited Administrator properties and change to Administrator in the Access Rights tab

  Correct Answer: D

  Reference: https://www.google.com/url?sa=tandrct=jandq=andesrc=sandsource=webandcd=6andved=2ahUKEwj_8MSFwt_jAhXq6eAKHef4BHQQFjAFegQICRACandurl=ftp%3A%2F%2Fftp.symantec.com%2Fpublic%2Fenglish_us_canada%2Fproducts% 2Fsymantec_network_access_control%2F12.1%2Fmanuals%2Frtm%2FImplementation_Guide_SEP12.1.pdfandusg=AOvVaw1iBWRsg77eui30ZkjTX32_

• Question 36:

  An organization identified a threat in their environment and needs to limit the spread of the threat. How should the SEP Administrator block the threat using Application and Device Control?

  A. Gather the MD5 hash of the file and create an Application Content Rule that blocks the file based on specific arguments

  B. Gather the MD5 hash of the file and create an Application Content Rule that blocks the file based on the file fingerprint

  C. Gather the MD5 hash of the file and create an Application Content Rule that uses regular expression matching

  D. Gather the process name of the file and create an Application Content Rule that blocks the file based on the device id type

  Correct Answer: D

  Reference: https://support.symantec.com/us/en/article.tech123745.html

• Question 37:

  An organization needs to add a collection of DNS host names to permit in the firewall policy.

  How should the SEP Administrator add these DNS host names as a single rule in the firewall policy?

  A. Create a Host Group and add the DNS domain. Then create a firewall rule with the new Host Group as the Source/Destination

  B. Create a Host Group and add the DNS host names. Then create a firewall rule with the new Host Group as the Source/Destination

  C. Create a Host Group and add the DNS host names. Then create a firewall rule with the new Host Group as the Local/Remote

  D. Create a Host Group and add the DNS domain. Then create a firewall rule with the new Host Group as the Local/Remote

  Correct Answer: A

• Question 38:

  How should an administrator set up an alert to be notified when manual remediation is needed on an endpoint?

  A. Add a System event notification and specify "Left Alone" for the action taken. Choose to log the notification and send an e-mail to the system administrators

  B. Add a Single Risk Event notification and specify "Left Alone" for the action taken. Choose to log the notification and send an e-mail to the system administrators

  C. Add a New risk detected notification and specify "Left Alone" for the action taken. Choose to log the notification and send an e-mail to the system administrators

  D. Add a Client security alert notification and specify "Left Alone" for the action taken. Choose to log the notification and send an e-mail to the system administrators

  Correct Answer: A

  Reference: https://support.symantec.com/us/en/article.tech182388.html

• Question 39:

  What type of client remediation can an administrator perform in the SEPM with events in the Attack logs?

  A. Free additional disk space by removing files from Quarantine

  B. Review the operation status of client computers and enable protection technologies

  C. Create a Firewall rule in the Firewall policy

  D. Run Power Eraser remotely to resolve issues with heavily infected computers

  Correct Answer: B

• Question 40:

  What type of exceptions could an administrator create from the Symantec Endpoint Protection Manager for a Linux client? (Choose two.)

  A. Trusted Web Domain

  B. Security Risk Exceptions - File

  C. Security Risk Exceptions - Extension

  D. Known Risks

  E. Security Risk Exceptions - Folder

  Correct Answer: CE

  Reference: https://support.symantec.com/us/en/article.HOWTO80873.html#v120515448