Symantec 250-428 - Administration of Symantec Endpoint Protection 14 Exam
Page: 3 / 27
Total 131 questions
Question #11 (Topic: Single Topic)
A Symantec Endpoint Protection Manager (SEPM) administrator notices performance issues with the SEPM server. The Client tab becomes unresponsive in the
SEPM console and .DAT files accumulate in the "agentinfo" folder.
Which tool should the administrator use to gather log files to submit to Symantec Technical Support?
SEPM console and .DAT files accumulate in the "agentinfo" folder.
Which tool should the administrator use to gather log files to submit to Symantec Technical Support?
A. collectLog.cmd
B. LogExport.exe
C. smc.exe
D. ExportLog.vbs
Answer: A
Question #12 (Topic: Single Topic)
Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)
A. Application Learning should be deployed on a small group of systems in the enterprise.
B. Application Learning can generate significant CPU or memory use on a Symantec Endpoint Protection Manager.
C. Application Learning is dependent on Insight.
D. Application Learning requires a file fingerprint list to be created in advance.
E. Application Learning can generate increased false positives.
Answer: AB
Question #13 (Topic: Single Topic)
Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?
A. Verify the sqlserver.exe service is running on port 1433
B. Verify that dbsrv11.exe is listening on port 2638
C. Check the database transaction logs in X:\Program Files\Microsoft SQL Server
D. Check whether the MSSQLSERVER service is running
Answer: B
Question #14 (Topic: Single Topic)
An administrator changes the Virus and Spyware Protection policy for a specific group that disables Auto-Protect. The administrator assigns the policy and the
client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-
Protect is still enabled on the client system.
Which action should the administrator take to ensure that the desired setting is in place on the client?
client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto-
Protect is still enabled on the client system.
Which action should the administrator take to ensure that the desired setting is in place on the client?
A. Restart the client system.
B. Enable the padlock next to the setting in the policy.
C. Run a command on the computer to Update Content
D. Withdraw the Virus and Spyware Protection policy
Answer: B
Question #15 (Topic: Single Topic)
What does SONAR use to reduce false positives?
A. Virus and Spyware definitions
B. Extended File Attributes (EFA) table
C. File Fingerprint list
D. Symantec Insight
Answer: D
