Free 250-428 Exam Dumps Preview

A managed service provider (MSP) is managing Symantec Endpoint Protection for a number of independent companies. Each company has administrators who will log in from time to time to add new clients. Administrators must be prevented from seeing the existence of other companies in the console.

What should an administrator create for each independent company?

Solusell recently deployed SEP 14 in their environment and created the following groups for their computers: Desktops Laptops Servers

What type of group structure does Solusell use?

A Symantec Endpoint Protection administrator must block traffic from an attacking computer for a specific time period.

Where should the administrator adjust the time to block the attacking computer?

In the virus and Spyware Protection policy, an administrator sets the First action to Clean risk and sets If first action fails to Delete risk.

Which two factors should the administrator consider? (Select two.)

What are two supported Symantec Endpoint Protection Manager authentication types? (Select two.)

Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?

Which protection technology can detect botnet command and control traffic generated on the Symantec Endpoint Protection client machine?

What options should an administrator uncheck in the database properties if you perform database maintenance in SQL Management Studio?

An organization recently experienced an outbreak involving a threat that replicated over network shares.
The SEP Administrator needs to heuristically scan file operations that target network drives.

What options should an administrator enable in the Virus and Spyware Protection policy?

A company has 10,000 Symantec Endpoint Protection (SEP) clients deployed using two Symantec Endpoint Protection Managers (SEPMs).

Which configuration is recommended to ensure that each SEPM is able to effectively handle the communications load with the SEP clients?

Where can an administrator obtain the Sylink.xml file?

A Symantec Endpoint Protection administrator needs to prevent users from modifying files in a specific program folder that is on all client machines.

What does the administrator need to configure?

An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear.

What is the likely problem?

In addition to performance improvements, which two benefits does Insight provide? (Select two.)

What is a function of the Symantec Endpoint Protection client?

The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM).

How many content revisions must the SEPM keep to ensure clients that check in to the SEPM every 10 days receive xdelta content packages instead of full content packages?

Where in the Symantec Endpoint Protection (SEP) management console will a SEP administrator find the option to allow all users to enable and disable the client firewall?

An administrator configures the scan duration for a scheduled scan. The scan fails to complete in the specified time period.

When will the next scheduled scan occur on the computer?

What SEP feature is leveraged when configuring custom IPS?

An administrator notices that some entries list that the Risk was partially removed. The administrator needs to determine whether additional steps are necessary to remediate the threat.

Where in the Symantec Endpoint Protection Manager console can the administrator find additional information on the risk?

What is a supported migration path for Symantec Endpoint Protection?

A Symantec Endpoint Protection (SEP) administrator performed a disaster recovery without a database backup.

In which file should the SEP administrator add "scm.agent.groupcreation=true" to enable the automatic creation of client groups?

A user is unknowingly about to connect to a malicious website and download a known threat within a .rar file. All Symantec Endpoint Protection technologies are installed on the client's system.

In which feature set order must the threat pass through to successfully infect the system?

An organization created the following locations for their endpoint: Internet (for remote user with no VPN) VPN (remote users connected to the corporate network)
LAN Ethernet
LAN Wifi

The corporate network and VPN users have internet traffic filtered through a Content Analysis Appliance and a Next-Gen Firewall.

Which location is the most exposed to malicious downloads and needs a higher security posture in the Virus and Spyware protection policy?

A company has an application that requires network traffic in both directions to multiple systems at a specific external domain. A firewall rule was created to allow traffic to and from the external domain, but the rule is blocking incoming traffic.

What should an administrator enable in the firewall policy to allow this traffic?