250-428

250-428 practice questions, page 3 of 7, with answer review and explanations.

Question 11

A Symantec Endpoint Protection Manager (SEPM) administrator notices performance issues with the SEPM server. The Client tab becomes unresponsive in the SEPM console and .DAT files accumulate in the "agentinfo" folder. Which tool should the administrator use to gather log files to submit to Symantec Technical Support?

  1. collectLog.cmd
  2. LogExport.exe
  3. smc.exe
  4. ExportLog.vbs

Question 12

Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)

  1. Application Learning should be deployed on a small group of systems in the enterprise.
  2. Application Learning can generate significant CPU or memory use on a Symantec Endpoint Protection Manager.
  3. Application Learning is dependent on Insight.
  4. Application Learning requires a file fingerprint list to be created in advance.
  5. Application Learning can generate increased false positives.

Question 13

Which task should an administrator perform to troubleshoot operation of the Symantec Endpoint Protection embedded database?

  1. Verify the sqlserver.exe service is running on port 1433
  2. Verify that dbsrv11.exe is listening on port 2638
  3. Check the database transaction logs in X:\Program Files\Microsoft SQL Server
  4. Check whether the MSSQLSERVER service is running

Question 14

An administrator changes the Virus and Spyware Protection policy for a specific group that disables Auto-Protect. The administrator assigns the policy and the client systems apply the corresponding policy serial number. Upon visual inspection of a physical client system, the policy serial number is correct. However, Auto- Protect is still enabled on the client system. Which action should the administrator take to ensure that the desired setting is in place on the client?

  1. Restart the client system.
  2. Enable the padlock next to the setting in the policy.
  3. Run a command on the computer to Update Content
  4. Withdraw the Virus and Spyware Protection policy

Question 15

What does SONAR use to reduce false positives?

  1. Virus and Spyware definitions
  2. Extended File Attributes (EFA) table
  3. File Fingerprint list
  4. Symantec Insight