Symantec Data Loss Prevention 16.x Administration Technical Specialist 250-587 Question # 31 Topic 4 Discussion
250-587 Exam Topic 4 Question 31 Discussion:
Question #: 31
Topic #: 4
How should a DLP administrator change a policy that it retains the original file when an endpoint incident has detected a “copy to USB device” operation?
A.
Add a “Limit Incident Data Retention” response rule with “Retain Original Message” option selected
B.
Modify the agent configuration and select the option “Retain Original Files”
C.
Modify the agent config.db to include the file
D.
Modify the “Endpoint_Retain_Files.int” setting in the Endpoint server configuration
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit