Broadcom 250-428 Exam Questions Instant Access

Question 1

A company deploys Symantec Endpoint Protection (SEP) to50 virtual machines running on a single ESXi host.

Which configuration change can the administrator make to minimize sudden IOPS impact on the ESXi server while each SEP endpoint communicates with the Symantec Endpoint Protection Manager?

AReduce number of content revisions to keep

BIncrease download randomization window

CReduce the heartbeat interval

DIncrease Download Insight sensitivity level

Answer : B

Question 2

Which two are policy types within the Symantec Endpoint Protection Manager? (Select two.)

AIntrusion Prevention

BExceptions

CProcess Control

DShared Insight

EHost Protection

Answer : A, B

References: https://support.symantec.com/en_US/article.TECH104434.html

Question 3

An administrator changes the Virus and Spyware Protection policy for a specific group that disables Auto-Protect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-Protect is still enabled on the client system.

Which action should the administrator take to ensure that the desired setting is in place on the client?

ARestart the client system.

BEnable the padlock next to the setting in the policy.

CRun a command on the computer to Update Content

DWithdraw the Virus and Spyware Protection policy

Answer : B

Question 4

A company deploys Symantec Endpoint Protection client to its sales staff who travel across the country.

Which deployment method should the company use to notify its sales staff to install the client?

AUnmanaged Detector

BClient Deployment Wizard

CPull mode

DPush mode

Answer : B

References: https://support.symantec.com/en_US/article.HOWTO80787.html#v16194660

Question 5

A company receives a high number of reports from users that files being downloaded from internal web servers are blocked. The Symantec Endpoint Protection administrator verifies that the Automatically trust any file downloaded from an intranet website option is enabled.

Which configuration can cause Insight to block the files being downloaded from the internal web servers?

AVirus and Spyware definitions are out of date.

BLocal intranet zone is configured incorrectly on the Mac clients browser settings.

CIntrusion prevention is disabled.

DLocal intranet zone is configured incorrectly on the Windows clients browser settings.

Answer : D

Question 6

An administrator is responsible for the Symantec Endpoint Protection architecture of a large, multi-national company with three regionalized data centers. The administrator needs to collect data from clients; however, the collected data must stay in the local regional data center. Communication between the regional data centers is allowed 20 hours a day.

How should the administrator architect this organization?

ASet up 3 domains

BSet up 3 sites

CSet up 3 groups

DSet up 3 locations

Answer : A

References: https://support.symantec.com/en_US/article.HOWTO80764.html

Question 7

A Symantec Endpoint Protection administrator is using System Lockdown in blacklist mode with a file fingerprint list. When testing a client, the administrator notices that at least one of the files on the list is allowed to execute.

What is the likely cause of the problem?

AThe application has been upgraded.

BThe Application and Device Control policy is in test mode.

CA file exception has been added to the Exceptions policy.

DThe Application and Device Control policy is allowing the file to execute.

Answer : A

Broadcom Symantec Endpoint Protection 14 Technical Specialist 250-428 Exam Questions