Symantec Symantec Certified Specialist 250-428 Questions & Answers

• Question 1:

  How could an administrator decrease the timeout period before logging back onto the management console?

  A. On the General tab of the Server Properties, click the Console Timeout drop-down list and select one of the available options for length of time

  B. On the General tab of the Domain Properties, click the Console Timeout drop-down list and select one of the available options for length of time

  C. On the General tab of the Site Properties, click the Console Timeout drop-down list and select one of the available options for length of time

  D. On the General tab of the Administrator Properties, click the Console Timeout drop-down list and select one of the available options for length of time

  Correct Answer: C

  Reference: https://support.symantec.com/us/en/article.HOWTO80882.html

• Question 2:

  Solusell recently deployed SEP 14 in their environment and created the following groups for their computers: Desktops Laptops Servers

  What type of group structure does Solusell use?

  A. Role

  B. Combination

  C. Folder

  D. Geography

  Correct Answer: C

  Reference: https://support.symantec.com/us/en/article.tech134409.html

• Question 3:

  What steps should an administrator take to utilize Symantec Endpoint Protection in a non-persistent virtual desktop infrastructure?

  A. Setup the base image and configure client logs in the SEPM console

  B. Setup the base image and configure a separate purge interval for offline non-persistent VDI clients in the SEPM console

  C. Setup the base image and delete offline clients in the SEPM console

  D. Setup the base image and configure "Delete clients that have not connected for a specified time" setting from the default of 30 to 1 in the SEPM console

  Correct Answer: B

  Reference: https://support.symantec.com/us/en/article.HOWTO81120.html#v74771361

• Question 4:

  Where could a SEP Administrator specify a notice to display before logging onto the Symantec Endpoint Protection Manager?

  A. Add banner title and banner text under the Logon Banner

  B. Once a month

  C. Everyday

  D. Every two weeks

  Correct Answer: A

• Question 5:

  Where could a SEP Administrator specify a notice to display before logging onto the Symantec Endpoint Protection Manager?

  A. Add banner title and banner text under the Logon Banner tab of the Site Properties

  B. Add banner title and banner text under the Logon Banner tab of the Administrator Properties

  C. Add banner title and banner text under the Logon Banner tab of the Server Properties

  D. Add banner title and banner text under the Logon Banner tab of the Domain Properties

  Correct Answer: B

• Question 6:

  An administrator needs to identify infected computers that require a restart to finish remediation of a threat. What steps in the SEPM should an administrator perform to identify and restart the systems?

  A. View the Computer Status log to determine if any computers require a restart. Run a command from the SONAR log to restart computers.

  B. View the Computer Status log to determine if any computers require a restart. Run a command from the Attack log to restart computers.

  C. View the SONAR log to determine if any computers require a restart. Run a command from the Computer Status log to restart computers.

  D. View the Computer Status log to determine if any computers require a restart. Run a command from the Risk log to restart computers.

  Correct Answer: D

  Reference: https://support.symantec.com/us/en/article.HOWTO80936.html

• Question 7:

  What SEP feature is leveraged when configuring custom IPS?

  A. Firewall

  B. Virus and Spyware

  C. Host Integrity

  D. SONAR

  Correct Answer: A

  Reference: https://www.symantec.com/connect/forums/sep-custom-ips-signatures

• Question 8:

  An organization recently experienced an outbreak involving a threat that replicated over network shares. The SEP Administrator needs to heuristically scan file operations that target network drives. What options should an administrator enable in the Virus and Spyware Protection policy?

  A. Browse to Early Launch Malware Driver and select Enable Symantec early launch malware

  B. Browse to Download Protection Download Insight and select Enable Download Insight to detect potential risks in downloaded files based on reputation

  C. Browse to SONAR and enable Scan files on remote computers

  D. Browse to Auto Protect Scan Details and enable Scan files on remote computers

  Correct Answer: D

  Reference: https://support.symantec.com/us/en/article.tech92424.html

• Question 9:

  How often does Symantec recommend running full scans?

  A. Once a week

  B. Once a month

  C. Everyday

  D. Every two weeks

  Correct Answer: A

  Reference: https://www.symantec.com/connect/forums/use-or-not-use-scheduled-full-scan-servers

• Question 10:

  What type of exceptions can an administrator create from the Symantec Endpoint Protection Manager for a Mac client?

  A. Security Risk Exceptions - File

  B. Security Risk Exceptions for both File or Folder

  C. Security Risk Exceptions - Folder

  D. Security Risk Exceptions - Extension

  Correct Answer: D