Symantec 250-428 Online Practice Questions and Exam Preparation

Symantec 250-428 Online Questions & Answers

• Question 1:

  Which setting can an administrator change that will result in the greatest impact on the speed of delivery of Symantec Endpoint Protection policy changes to the endpoints?

  A. Download randomization
  B. Heartbeat interval
  C. LiveUpdate scheduling frequency
  D. Reconnection preferences
  D. Reconnection preferences

• Question 2:

  What Symantec Endpoint Protection component facilitates distributing content clients that have a poor connection to the Symantec Endpoint Protection Manager (SEPM)?

  A. Group Update Provider
  B. SEPM Replication
  C. LiveUpdate Administrator
  D. Shared Insight Cache Server
  A. Group Update Provider

• Question 3:

  Which step is unnecessary when an administrator creates an application rule set?

  A. define a provider
  B. select a process to apply
  C. select a process to exclude
  D. define rule order
  A. define a provider

• Question 4:

  A managed service provider (MSP) is managing Symantec Endpoint Protection for a number of independent companies. Each company has administrators who will log in from time to time to add new clients. Administrators must be prevented from seeing the existence of other companies in the console.

  What should an administrator create for each independent company?

  A. Domain
  B. Location
  C. Group
  D. Site
  A. Domain

• Question 5:

  Which option is a characteristic of a Symantec Endpoint Protection (SEP) domain?

  A. Each domain has its own management server and database.
  B. Every administrator from one domain can view data in other domains.
  C. Data for each domain is stored in its own separate SEP database.
  D. Domains share the same management server and database.
  D. Domains share the same management server and database.

• Question 6:

  A Symantec Endpoint Protection (SEP) client uses a management server list with three management servers in the priority 1 list.

  Which mechanism does the SEP client use to select an alternate management server if the currently selected management server is unavailable?

  A. The client chooses the next server alphabetically by server name.
  B. The client chooses another server alphabetically in the list randomly.
  C. The client chooses a server with the next highest IP address.
  D. The client chooses a server based on the lowest server load.
  B. The client chooses another server alphabetically in the list randomly.

• Question 7:

  Which two settings does an administrator enable to use the Risk Tracer feature in the Virus and Spyware Protection policy? (Select two.)

  A. Application and Device Control Policy
  B. Tamper Protection
  C. Firewall Policy
  D. IPS active response
  E. Application Learning
  C. Firewall Policy
  D. IPS active response

• Question 8:

  An organization has a small group of Incident Responders (IR) using pentest tools and network monitoring (AngryIP scanner, Nmap). They need to allow all inbound and outbound traffic for their tools. What policy changes does the SEP Administrator need to configure in the SEPM?

  A. Create a Firewall rule that allows all hosts in the Firewall policy and enable Host Integrity
  B. Create a Firewall rule that allows all hosts in the Firewall policy and add the computers as a Trusted Web Domain in the Exceptions policy
  C. Create a Firewall rule that allows all hosts in the Firewall policy and enable System Lockdown
  D. Create a Firewall rule for each application in the firewall policy and add the IR computers to the Excluded Hosts in the IPS policy
  B. Create a Firewall rule that allows all hosts in the Firewall policy and add the computers as a Trusted Web Domain in the Exceptions policy

• Question 9:

  An administrator plans to implement a multi-site Symantec Endpoint Protection (SEP) deployment. The administrator needs to determine whether replication is viable without needing to make network firewall changes or change defaults in SEP.

  Which port should the administrator verify is open on the path of communication between the two proposed sites?

  A. 1433
  B. 2967
  C. 8014
  D. 8443
  D. 8443

• Question 10:

  What does SONAR use to reduce false positives?

  A. Virus and Spyware definitions
  B. File Fingerprint list
  C. Symantec Insight
  D. Extended File Attributes (EFA) table
  C. Symantec Insight