File Info
| Exam | Administration of Symantec Endpoint Protection 14 |
| Number | 250-428 |
| File Name | Symantec.250-428.Prep4Sure.2019-06-03.53q.vcex |
| Size | 326 KB |
| Posted | Jun 03, 2019 |
| Download | Symantec.250-428.Prep4Sure.2019-06-03.53q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
A Symantec Endpoint Protection Manager (SEPM) administrator notices performance issues with the SEPM server. The Client tab becomes unresponsive in the SEPM console and .DAT files accumulate in the “agentinfo” folder.
Which tool should the administrator use to gather log files to submit to Symantec Technical Support?
- collectLog.cmd
- LogExport.exe
- smc.exe
- ExportLog.vbs
Correct answer: A
Explanation:
References: https://support.symantec.com/en_US/article.TECH105955.html References: https://support.symantec.com/en_US/article.TECH105955.html
Question 2
Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)
- Application Learning should be deployed on a small group of systems in the enterprise.
- Application Learning can generate significant CPU or memory use on a Symantec Endpoint Protection Manager.
- Application Learning is dependent on Insight.
- Application Learning requires a file fingerprint list to be created in advance.
- Application Learning can generate increased false positives.
Correct answer: AB
Explanation:
References: https://support.symantec.com/en_US/article.TECH134367.html References: https://support.symantec.com/en_US/article.TECH134367.html
Question 3
Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?
- Verify the sqlserver.exe service is running on port 1433
- Verify that dbsrv11.exe is listening on port 2638
- Check the database transaction logs in X:\Program Files\Microsoft SQL Server
- Check whether the MSSQLSERVER service is running
Correct answer: B
Explanation:
References: https://support.symantec.com/en_US/article.TECH160964.html References: https://support.symantec.com/en_US/article.TECH160964.html
Question 4
An administrator changes the Virus and Spyware Protection policy for a specific group that disables Auto-Protect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-Protect is still enabled on the client system.
Which action should the administrator take to ensure that the desired setting is in place on the client?
- Restart the client system.
- Enable the padlock next to the setting in the policy.
- Run a command on the computer to Update Content
- Withdraw the Virus and Spyware Protection policy
Correct answer: B
Question 5
What does SONAR use to reduce false positives?
- Virus and Spyware definitions
- Extended File Attributes (EFA) table
- File Fingerprint list
- Symantec Insight
Correct answer: D
Explanation:
References: https://support.symantec.com/en_US/article.HOWTO80929.html References: https://support.symantec.com/en_US/article.HOWTO80929.html
Question 6
Which option is a characteristic of a Symantec Endpoint Protection (SEP) domain?
- Every administrator from one domain can view data in other domains.
- Each domain has its own management server and database.
- Data for each domain is stored in its own separate SEP database.
- Domains share the same management server and database.
Correct answer: D
Explanation:
References: https://support.symantec.com/en_US/article.HOWTO80764.html References: https://support.symantec.com/en_US/article.HOWTO80764.html
Question 7
An administrator notices that some entries list that the Risk was partially removed. The administrator needs to determine whether additional steps are necessary to remediate the threat.
Where in the Symantec Endpoint Protection Manager console can the administrator find additional information on the risk?
- Infected and At Risk Computers report
- Risk log
- Notifications
- Computer Status report
Correct answer: B
Explanation:
References: https://support.symantec.com/en_US/article.TECH95543.html References: https://support.symantec.com/en_US/article.TECH95543.html
Question 8
An administrator reports that the Home, Monitors, and Report pages are absent in the Symantec Endpoint Protection Management console when the administrator logs on.
Which action should the administrator perform to correct the problem?
- Grant the Administrator Full Access to Root group of the organization
- Configure proxy settings for each server in the site
- Configure External Logging to Enable Transmission of Logs to a Syslog Server
- Grant View Reports permission to the administrator
Correct answer: D
Question 9
An administrator is reviewing an Infected Clients Report and notices that a client repeatedly shows the same malware detection. Although the client remediates the files, the infection continues to display in the logs.
Which two functions should be enabled to automate enhanced remediation of a detected threat and its related side effects? (Select two.)
- Stop Service Automatically
- Stop and Reload AutoProtect
- Terminate Processes Automatically
- Risk Tracer
- Early Launch Anti-Malware Driver
Correct answer: AC
Question 10
A company deploys Symantec Endpoint Protection (SEP) to50 virtual machines running on a single ESXi host.
Which configuration change can the administrator make to minimize sudden IOPS impact on the ESXi server while each SEP endpoint communicates with the Symantec Endpoint Protection Manager?
- Reduce number of content revisions to keep
- Increase download randomization window
- Reduce the heartbeat interval
- Increase Download Insight sensitivity level
Correct answer: B
