Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Symantec Data Loss Prevention 250-587 Questions and answers with CertsForce

Viewing page 3 out of 4 pages
Viewing questions 21-30 out of questions
Questions # 21:

Which two detection technology options ONLY run on a detection server? (Choose two.)

Options:

A.

Form Recognition


B.

Indexed Document matching (IDM)


C.

Described Content Matching (DCM)


D.

Exact data matching (EDM)


E.

vector Machine Learning (VML)


Expert Solution
Questions # 22:

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration.

What is one possible reason that the agent fails to receive the new configuration?

Options:

A.

The new agent configuration was saved but not applied to any endpoint groups.


B.

The new agent configuration was copied and modified from the default agent configuration.


C.

The default agent configuration must be disabled before the new configuration can take effect.


D.

The Endpoint server needs to be recycled so that the new agent configuration can take effect.


Expert Solution
Questions # 23:

Which type of detector integrates with Symantec CloudSOC?

Options:

A.

Cloud Detection Service for REST


B.

Cloud Detection Service for ICAP


C.

Cloud Detection Service for SMTP


D.

Cloud Prevent detector


Expert Solution
Questions # 24:

A company needs to secure the content of all mergers and Acquisitions Agreements/ However, the standard text included in all company literature needs to be excluded.

How should the company ensure that this standard text is excluded from detection?

Options:

A.

Create a Whitelisted.txt file after creating the Vector Machine Learning (VML) profile.


B.

Create a Whitelisted.txt file after creating the Exact Data Matching (EDM) profile


C.

Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile


D.

Create a Whitelisted.txt file before creating the Exact Data Matching (EDM) profile


Expert Solution
Questions # 25:

What are two (2) reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)

Options:

A.

To specify the endpoint server


B.

To specify an IP address or range


C.

To specify network card status (ON/OFF)


D.

To specify domain names


E.

To specify Wi-Fi SSID names


Expert Solution
Questions # 26:

Which two factors are common sources of data leakage where the main actor is well-meaning insider? (Choose two.)

Options:

A.

An absence of a trained incident response team


B.

A disgruntled employee for a job with a competitor


C.

Merger and Acquisition activities


D.

Lack of training and awareness


E.

Broken business processes


Expert Solution
Questions # 27:

Which two automated response rules will be active in policies that include Exact Data Matching (EDM) detection rule? (Choose two.)

Options:

A.

Endpoint Discover: Quarantine File


B.

All: Send Email Notification


C.

Endpoint Prevent: User Cancel


D.

Endpoint Prevent: Block


E.

Network Protect: Quarantine File


Expert Solution
Questions # 28:

Which two components can perform a file system scan of a workstation? (Choose two.)

Options:

A.

Endpoint Server


B.

DLP Agent


C.

Network Prevent for Web Server


D.

Discover Server


E.

Enforce Server


Expert Solution
Questions # 29:

Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?

Options:

A.

The OCR engine must be installed on detection server other than the Enforce server.


B.

The OCR server software must be installed on one or more dedicated (non-detection) Linux servers.


C.

The OCR engine must be directly on the Enforce server.


D.

The OCR server software must be installed on one or more dedicated (non-detection) Windows servers.


Expert Solution
Questions # 30:

When managing an Endpoint Discover scan, a DLP administrator notices some endpoint computers are NOT completing their scans.

When does the DLP agent stop scanning?

Options:

A.

When the agent sends a report within the “Scan Idle Timeout” period


B.

When the endpoint computer is rebooted and the agent is started


C.

When the agent is unable to send a status report within the “Scan Idle Timeout” period


D.

When the agent sends a report immediately after the “Scan Idle Timeout” period


Expert Solution
Viewing page 3 out of 4 pages
Viewing questions 21-30 out of questions