250-315 Exam Questions

Which two Symantec Endpoint Protection components are used to distribute content updates? (Select two.)

What is a valid Symantec Endpoint Protection (SEP) single site design?

Where can an administrator obtain the Sylink.xml file?

An administrator is unable to delete a location. What is the likely cause?

Which two are policy types within the Symantec Endpoint Protection Manager? (Select two.)

An organization employs laptop users who travel frequently. The organization needs to acquire log data from these Symantec Endpoint Protection clients periodically. This must happe...

A large software company runs a small engineering department that is remotely located over a slow WAN connection. Which option should the company use to install an exported Symante...

A company deploys Symantec Endpoint Protection client to its sales staff who travel across the country. Which deployment method should the company use to notify its sales staff to...

Refer to the exhibit. An administrator uses the search criteria displayed in the exhibit. Which results are returned from the query?

A company deploys Symantec Endpoint Protection (SEP) to 50 virtual machines running on a single ESXi host. Which configuration change can the administrator make to minimize sudden...

A company has 10,000 Symantec Endpoint Protection (SEP) clients deployed using two Symantec Endpoint Protection Managers (SEPMs). Which configuration is recommended to ensure that...

A Symantec Endpoint Protection (SEP) client uses a management server list with three management servers in the priority 1 list. Which mechanism does the SEP client use to select an...

Which setting can an administrator change that will result in the greatest impact on the speed of delivery of Symantec Endpoint Protection policy changes to the endpoints?

Which action does the Shared Insight Cache (SIC) server take when the whitelist reaches maximum capacity?

Which policy should an administrator modify to enable Virtual Image Exception (VIE) functionality?

The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM). How many content revisions must the SEPM keep to ensure clients that chec...

Which setting can an administrator configure in the LiveUpdate Policy?

Which ports on the company firewall must an administrator open to avoid problems when connecting to Symantec Public LiveUpdate servers?

An administrator needs to add an Application Exception. When the administrator accesses the Application Exception dialog window, applications fail to appear. What is the likely pro...

A company uses a remote administration tool that is detected and quarantined by Symantec Endpoint Protection (SEP). Which step can an administrator perform to continue using the re...

Which command attempts to find the name of the drive in the private region and to match it to a disk media record that is missing a disk access record?

A company receives a high number of reports from users that files being downloaded from internal web servers are blocked. The Symantec Endpoint Protection administrator verifies th...

Which action should an administrator take to prevent users from using Windows Security Center?

An administrator configures the scan duration for a scheduled scan. The scan fails to complete in the specified time period. When will the next scheduled scan occur on the computer...

A Symantec Endpoint Protection (SEP) administrator receives multiple reports that machines are experiencing performance issues. The administrator discovers that the reports happen...

An administrator needs to increase the access speed for client files that are stored on a file server. Which configuration should the administrator review to address the read speed...

What are two criteria that Symantec Insight uses to evaluate binary executables? (Select two.)

How are Insight results stored?

Which two options are available when configuring DNS change detected for SONAR? (Select two.)

Refer to the exhibit. In the use case displayed in the exhibit, why is Notepad unable to save the changes to this file?

An administrator selects the Backup files before attempting to repair the Remediations option in the Auto-Protect policies. Which two actions occur when a virus is detected? (Selec...

In the virus and Spyware Protection policy, an administrator sets the First action to Clean risk and sets If first action fails to Delete risk. Which two factors should the adminis...

A threat was detected by Auto-Protect on a client system. Which command can an administrator run to determine whether additional threats exist?

A company has an application that requires network traffic in both directions to multiple systems at a specific external domain. A firewall rule was created to allow traffic to and...

A Symantec Endpoint Protection administrator must block traffic from an attacking computer for a specific time period. Where should the administrator adjust the time to block the a...

A user is unknowingly about to connect to a malicious website and download a known threat within a .rar file. All Symantec Endpoint Protection technologies are installed on the cli...

A Symantec Endpoint Protection (SEP) administrator creates a firewall policy to block FTP traffic and assigns the policy to all of the SEP clients. The network monitoring team info...

A Symantec Endpoint Protection administrator needs to prevent users from modifying files in a specific program folder that is on all client machines. What does the administrator ne...

A Symantec Endpoint Protection administrator is using System Lockdown in blacklist mode with a file fingerprint list. When testing a client, the administrator notices that at least...

Which two criteria can an administrator use to determine hosts in a host group? (Select two.)

What is an appropriate use of a file fingerprint list?

When can an administrator add a new replication partner?

An administrator is re-adding an existing Replication Partner to the local Symantec Endpoint Protection Manager site. Which two parameters are required to re-establish this replica...

Which task is unavailable for administrative accounts that authenticate using RSA SecurID Authentication?

Which two considerations must an administrator make when enabling Application Learning in an environment? (Select two.)

A Symantec Endpoint Protection (SEP) administrator performed a disaster recovery without a database backup. In which file should the SEP administrator add "scm.agent.groupcreation=...

Catastrophic hardware failure has occurred on a single Symantec Endpoint Protection Manager (SEPM) in an environment with two SEPMs. What is the quickest way an administrator can r...

Which protection technology can detect botnet command and control traffic generated on the Symantec Endpoint Protection client machine?

Which protection engine should be enabled to drop malicious vulnerability scans against a client system?

What is a function of Symantec Insight?