250-428 Administration of Symantec Endpoint Protection 14 exam is a hot Symantec certification exam, Exam4Training offers you the latest free online 250-428 dumps to practice. You can get online training in the following questions, all these questions are verified by Symantec experts. If this exam changed, we will share new update questions.
Which option is a characteristic of a Symantec Endpoint Protection (SEP) domain?
A . Every administrator from one domain can view data in other domains.
B . Each domain has its own management server and database.
C . Data for each domain is stored in its own separate SEP database.
D . Domains share the same management server and database.
Answer: D
Explanation:
References: https://support.symantec.com/en_US/article.HOWTO80764.html
Which two options are available when configuring DNS change detections for SONAR? (Select two.)
A . Log
B . Quarantine
C . Block
D . Active Response
E . Trace
Answer: A,C
Why does Power Eraser need Internet access?
A . Validate root certificates on all portable executables (PXE) files
B . Leverage Symantec Insight
C . Ensure the Power Eraser tool is the latest release
D . Look up CVE vulnerabilities
Answer: B
Explanation:
References: https://support.symantec.com/en_US/article.TECH134803.html
Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?
A . Verify the sqlserver.exe service is running on port 1433
B . Verify that dbsrv11.exe is listening on port 2638
C . Check the database transaction logs in X:Program FilesMicrosoft SQL server
D . Check whether the MSSQLSERVER service is running
Answer: B
Explanation:
References: https://support.symantec.com/en_US/article.TECH160964.html
Which two instances could cause Symantec Endpoint Protection to be unable to remediate a file? (Select two.)
A . Another scan is in progress.
B . The detected file is in use.
C . The file has good reputation.
D . There are insufficient file permissions.
E . The file is marked for deletion by Windows on restart.
Answer: B,D
A company deploys Symantec Endpoint Protection (SEP) to50 virtual machines running on a single ESXi host.
Which configuration change can the administrator make to minimize sudden IOPS impact on the ESXi server while each SEP endpoint communicates with the Symantec Endpoint Protection Manager?
A . Reduce number of content revisions to keep
B . Increase download randomization window
C . Reduce the heartbeat interval
D . Increase Download Insight sensitivity level
Answer: B
A company allows users to create firewall rules. During the course of business, users are accidentally adding rules that block a custom internal application.
Which steps should the Symantec Endpoint Protection administrator take to prevent users from blocking the custom application?
A . Create an Allow All Firewall rule for the fingerprint of the file and place it at the bottom of the firewall rules above the blue line
B . Create an Allow firewall rule for the application and place it at the bottom of the firewall rules below the blue line
C . Create an Allow for the network adapter type used by the application and place it at the top of the firewall rules below the blue line.
D . Create an Allow Firewall rule for the application and place it at the top of the firewall rules above the blue line.
Answer: A
Explanation:
References: https://support.symantec.com/en_US/article.TECH104433.html
An administrator is re-adding an existing Replication Partner to the local Symantec Endpoint Protection Manager site.
Which two parameters are required to re-establish this replication partnership? (Select two.)
A . Remote site Encryption Password
B . Remote server IP Address and port
C . Remote SQL database account credentials
D . Remote server Administrator credentials
E . Remote site Domain ID
Answer: B,D
Explanation:
References: https://support.symantec.com/en_US/article.TECH104455.html
Which Symantec Endpoint Protection defense mechanism provides protection against threats that propagate from system to system through the use of autorun.inf files?
A . Host Integrity
B . SONAR
C . Application and Device Control
D . Emulator
Answer: C
How are Insight results stored?
A . Encrypted on the Symantec Endpoint Protection Client
B . Unencrypted on the Symantec Endpoint Protection Manager
C . Encrypted on the Symantec Endpoint Protection Manager
D . Unencrypted on the Symantec Endpoint Protection Client
Answer: A