Question 1

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a “copy to USB device” operation?

Accepted Answer

Correct answer: A

Question 2

Under the “System Overview” in the Enforce management console, the status of a Network Monitor detection server is shown as “Running Selected.” The
Network Monitor server’s event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?

Accepted Answer

Correct answer: D

Question 3

Which action should a DLP administrator take to secure communications between an on-premises Enforce server and detection servers hosted in the Cloud?

Accepted Answer

Reference: https://www.symantec.com/connect/articles/sslkeytool-utility-and-server-certificates

Question 4

Which option correctly describes the two-tier installation type for Symantec DLP?

Accepted Answer

Reference: https://www.symantec.com/connect/forums/deployment-enforce-and-detection-servers

Question 5

A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However,
data transfers to these devices are still being blocked. What is the first action an administrator should take to enable data transfers to the approved endpoint
devices?

Accepted Answer

Correct answer: D

Question 6

Which channel does Endpoint Prevent protect using Device Control?

Accepted Answer

Reference: https://support.symantec.com/en_US/article.HOWTO80865.html#v36651044

Question 7

From SurePassExam
https://www.surepassexam.com/250-438-exam-dumps.html (70 New Questions)
A divisional executive requests a report of all incidents generated by a particular region, summarized by department. What does the DLP administrator need to
configure to generate this report?

Accepted Answer

Correct answer: A

Question 8

What is Application Detection Configuration?

Accepted Answer

Reference: https://help.symantec.com/cs/DLP15.0/DLP/v119805091_v120691346/About-Application-Detection%7CSymantec%EF%BF%BD-Data-LossPrevention-15.0?locale=EN_US

Question 9

Which server target uses the “Automated Incident Remediation Tracking” feature in Symantec DLP?

Accepted Answer

Reference: https://help.symantec.com/cs/DLP15.0/DLP/v83981880_v120691346/Troubleshooting-automated-incident-remediation-tracking?locale=EN_US

Question 10

Refer to the exhibit.
What activity should occur during the baseline phase, according to the risk reduction model?

From SurePassExam
https://www.surepassexam.com/250-438-exam-dumps.html (70 New Questions)

Accepted Answer

Correct answer: C