Symantec Symantec Certifications 250-428 Questions & Answers

• Question 81:

  Which ports on the company firewall must an administrator open to avoid problems when connecting to Symantec Public LiveUpdate servers?

  A. 25, 80, and 2967

  B. 2967, 8014, and 8443

  C. 21, 443, and 2967

  D. 21, 80, and 443

  Correct Answer: D

• Question 82:

  A large software company runs a small engineering department that is remotely located over a slow WAN connection.

  Which option should the company use to install an exported Symantec Endpoint Protection (SEP) package to the remote site using the smallest amount of network bandwidth?

  A. a SEP package using Basic content

  B. a SEP package using a policy defined Single Group Update Provider (GUP)

  C. a SEP package using a policy defined Multiple Group Update Provider (GUP) list

  D. a SEP package using the Install Packages tab

  Correct Answer: A

• Question 83:

  The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM).

  How many content revisions must the SEPM keep to ensure clients that check in to the SEPM every 10 days receive xdelta content packages instead of full content packages?

  A. 10

  B. 20

  C. 30

  D. 60

  Correct Answer: C

  References: https://support.symantec.com/en_US/article.TECH94916.html https://support.symantec.com/en_US/article.TECH131528.html

• Question 84:

  Which two settings does an administrator enable to use the Risk Tracer feature in the Virus and Spyware Protection policy? (Select two.)

  A. Application and Device Control Policy

  B. Tamper Protection

  C. Firewall Policy

  D. IPS active response

  E. Application Learning

  Correct Answer: CD

  References: https://support.symantec.com/en_US/article.TECH102539.html

• Question 85:

  Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)

  A. Application Learning can generate increased false positives.

  B. Application Learning should be deployed on a small group of systems in the enterprise.

  C. Application Learning can generate significant CPU or memory use on a Symantec Endpoint Protection Manager.

  D. Application Learning requires a file fingerprint list to be created in advance.

  E. Application Learning is dependent on Insight.

  Correct Answer: BC

  References: https://support.symantec.com/en_US/article.TECH134367.html

• Question 86:

  Which policy should an administrator modify to enable Virtual Image Exception (VIE) functionality?

  A. Host Integrity Policy

  B. Virus and Spyware Protection Policy

  C. Exceptions Policy

  D. Application and Device Control Policy

  Correct Answer: B

  References: https://www.symantec.com/connect/articles/sep-121-virtualization

• Question 87:

  An administrator is recovering from a Symantec Endpoint Manager (SEPM) site failure.

  Which file should the administrator use during an install of SEPM to recover the lost environment according to Symantec Disaster Recovery Best Practice documentation?

  A. original installation log

  B. recovery_timestamp file

  C. settings.properties file

  D. Sylink.xml file from the SEPM

  Correct Answer: B

  References: https://support.symantec.com/en_US/article.TECH160736.html

• Question 88:

  Why does Power Eraser need Internet access?

  A. to leverage Symantec Insight

  B. to validate root certificates on all portable executables (PXE) files

  C. to ensure the Power Eraser tool is the latest release

  D. to look up CVE vulnerabilities

  Correct Answer: A

  References: https://support.symantec.com/en_US/article.TECH134803.html

• Question 89:

  What is the file scan workflow order when Shared Insight Cache and reputation are enabled?

  A. Symantec Insight > Shared Insight Cache server > local client Insight cache

  B. Local client Insight cache > Shared Insight Cache server > Symantec Insight

  C. Shared Insight Cache server > local client Insight cache > Symantec Insight

  D. Local client Insight cache > Symantec Insight > Shared Insight Cache server

  Correct Answer: B

• Question 90:

  Winch Symantec Endpoint Protection technology blocks a downloaded program from installing browser plugins?

  A. Intrusion Prevention

  B. SONAR

  C. Tamper Protection

  D. Application and Device Control

  Correct Answer: D