Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Symantec
  5. 250-428

Symantec 250-428 Exam
Administration of Symantec Endpoint Protection 14 (Broadcom) (Page 6 )

Updated On: 7-Feb-2026
Page 5 of 25
PDF with 159 Questions

After several failed logon attempts, the Symantec Endpoint Protection Manager (SFPM) has locked the default admin account. An administrator needs to make system changes as soon as possible to address an outbreak, but the admin account is the only account.
Which action should the administrator lake to correct the problem with minimal impact to the existing environment?

  1. Wait 15 minutes and attempt to log on again
  2. Restore the SEPM from a backup
  3. Run the Management Server and Configuration Wizard to reconfigure the server
  4. Reinstall the SEPM

Answer(s): A

Explanation:

https://support.symantec.com/en_US/article.HOWTO80757.html



Users report abnormal behavior on systems where Symantec Endpoint Protection is installed.
Which tool can an administrator run on the problematic systems to identify the likely cause of the abnormal behavior?

  1. smc.exe -stop
  2. SymHelp.exe
  3. PowerShell.exe
  4. CleanWipe.exe

Answer(s): B



What does SONAR use to reduce false positives?

  1. Virus and Spyware definitions
  2. File Fingerprint list
  3. Symantec Insight
  4. Extended File Attributes (EFA) table

Answer(s): C



A company plans to install six Symantec Endpoint Protection Managers (SEPMs) spread evenly across two sites. The administrator needs to direct replication activity to SEPM3 server in Site 1 and SEPM4 in Site 2.
Which two actions should the administrator take to direct replication activity to SEPM3 and SEPM4? (Select two.)

  1. Install SEPM3 and SEPM4 after the other SEPMs
  2. Install the SQL Server databases on SEPM3 and SEPM4
  3. Ensure SEPM3 and SEPM4 are defined as the top priority server in the Site Settings
  4. Ensure SEPM3 and SEPM4 are defined as remote servers in the replication partner configuration
  5. Install IT Analytics on SEPM3 and SEPM4

Answer(s): C,D



The LiveUpdate Download Schedule is set to the default on the Symantec Endpoint Protection Manager (SEPM).
How many content revisions must the SEPM keep to ensure clients that check in to the SEPM every 10 days receive xdelta content packages instead of full content packages?

  1. 10
  2. 20
  3. 30
  4. 60

Answer(s): C






Post your Comments and Discuss Symantec 250-428 exam prep with other Community members:

Join the 250-428 Discussion