250-438 Online Practice Questions and Answers

DRAG DROP

The Symantec Data Loss risk reduction approach has six stages.

Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

Select and Place:

What is the correct configuration for "BoxMonitor.Channels" that will allow the server to start as a Network Monitor server?

A. Packet Capture, Span Port

B. Packet Capture, Network Tap

C. Packet Capture, Copy Rule

D. Packet capture, Network Monitor

When managing an Endpoint Discover scan, a DLP administrator notices some endpoint computers are NOT completing their scans. When does the DLP agent stop scanning?

A. When the agent sends a report within the "Scan Idle Timeout" period

B. When the endpoint computer is rebooted and the agent is started

C. When the agent is unable to send a status report within the "Scan Idle Timeout" period

D. When the agent sends a report immediately after the "Scan Idle Timeout" period

Refer to the exhibit.

What activity should occur during the baseline phase, according to the risk reduction model?

A. Define and build the incident response team

B. Monitor incidents and tune the policy to reduce false positives

C. Establish business metrics and begin sending reports to business unit stakeholders

D. Test policies to ensure that blocking actions minimize business process disruptions

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP 15.0? (Choose two.)

A. Endpoint Prevent

B. Cloud Service for Email

C. Network Prevent for Email

D. Network Discover

E. Cloud Detection Service

Which two actions are available for a "Network Prevent: Remove HTTP/HTTPS content" response rule when the content is unable to be removed? (Choose two.)

A. Allow the content to be posted

B. Remove the content through FlexResponse

C. Block the content before posting

D. Encrypt the content before posting

E. Redirect the content to an alternative destination

A DLP administrator has performed a test deployment of the DLP 15.0 Endpoint agent and now wants to uninstall the agent. However, the administrator no longer remembers the uninstall password. What should the administrator do to work around the password problem?

A. Apply a new global agent uninstall password in the Enforce management console.

B. Manually delete all the Endpoint agent files from the test computer and install a new agent package.

C. Replace the PGPsdk.dll file on the agent's assigned Endpoint server with a copy from a different Endpoint server

D. Use the UninstallPwdGenerator to create an UninstallPasswordKey.

A customer needs to integrate information from DLP incidents into external Governance, Risk and Compliance dashboards.

Which feature should a third party component integrate with to provide dynamic reporting, create custom incident remediation processes, or support business processes?

A. Export incidents using the CSV format

B. Incident Reporting and Update API

C. Incident Data Views

D. A Web incident extraction report

A DLP administrator needs to remove an agent its associated events from an Endpoint server.

Which Agent Task should the administrator perform to disable the agent's visibility in the Enforce management console?

A. Delete action from the Agent Health dashboard

B. Delete action from the Agent List page

C. Disable action from Symantec Management Console

D. Change Endpoint Server action from the Agent Overview page

A company needs to implement Data Owner Exception so that incidents are avoided when employees send or receive their own personal information. What detection method should the company use?

A. Indexed Document Matching (IDM)

B. Vector Machine Learning (VML)

C. Exact Data Matching (EDM)

D. Described Content Matching (DCM)