Broadcom 250-428 Exam Questions Instant Access

Question 1

An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear.

What is the likely problem?

AThe Symantec Endpoint Protection Manager is installed on a Domain Controller.

BThe client computers already have exclusions for the applications.

CThe Learn applications that run on the client computers setting is disabled.

DThe clients are in a trusted Symantec Endpoint Protection domain.

Answer : C

Question 2

A Symantec Endpoint Protection (SEP) administrator creates a firewall policy to block FTP traffic and assigns the policy to all of the SEP clients. The network monitoring team informs the administrator that a client system is making an FTP connection to a server. While investigating the problem from the SEP client GUI, the administrator notices that there are zero entries pertaining to FTP traffic in the SET Traffic log or Packet log. While viewing the Network Activity dialog, there is zero inbound/outbound traffic for the FTP process.

What is the most likely reason?

AThe server is in the IPS policy excluded hosts list.

BThe block rule is below the blue line.

CPeer-to-peer authentication is allowing the traffic.

DThe server has an IPS exception for that traffic.

Answer : A

Question 3

Which action does the Shared Insight Cache (SIC) server take when the whitelist reaches maximum capacity?

AThe SIC server allocates additional memory for the whitelist as needed.

BThe SIC server will start writing the cache to disk.

CThe SIC server will remove the least recently used items based on the prune size.

DThe SIC server will remove items with the fewest number of votes.

Answer : C

Question 4

Which two criteria are used by Symantec Insight to evaluate binary executables? (Select two.)

AAge

BPrevalence

CSensitivity

DConfidentiality

EContent

Answer : A, B

Question 5

Which two options are available when configuring DNS change detections for SONAR? (Select two.)

ALog

BQuarantine

CBlock

DActive Response

ETrace

Answer : A, C

Question 6

Which option is a function of the Symantec Endpoint Protection client?

ASends and receives application reputation ratings from LiveUpdate

BUploads logs to the Shared Insight Cache

CDownloads virus content updates from Symantec Insight

DProvides a Lotus Notes email scanner

Answer : D

References: https://support.symantec.com/en_US/article.TECH95093.html

Question 7

A company has 10,000 Symantec Endpoint Protection (SEP) clients deployed using two Symantec Endpoint Protection Managers (SEPMs).

Which configuration is recommended to ensure that each SEPM is able to effectively handle the communications load with the SEP clients?

APull mode

BPush mode

CServer control mode

DClient control mode

Answer : A

Broadcom Symantec Endpoint Protection 14 Technical Specialist 250-428 Exam Questions