Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Administration of Symantec Data Loss Prevention 15 Practice Questions

Exams4sure Dumps

Exam style questions across every 250-438 domain

Last Update 3 days ago
Total Questions : 70

Start with our free 250-438 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Data Loss Prevention exam. Each 250-438 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Symantec weak domains, see where you're losing marks, and build a focused study plan in minutes.

250-438 PDF

250-438 PDF (Printable)
$46.5
$154.99

250-438 Testing Engine

250-438 PDF (Printable)
$51
$169.99

250-438 PDF + Testing Engine

250-438 PDF (Printable)
$63.9
$212.99
Question # 1

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a “cope to USB device” operation?

Options:

A.  

Add a “Limit Incident Data Retention” response rule with “retain Original Message” option selected.

B.  

Modify the agent config.db to include the file

C.  

Modify the “Endpoint_Retain_Files.int” setting in the Endpoint server configuration

D.  

Modify the agent configuration and select the option “retain Original Files”

Discussion 0
Question # 2

How should a DLP administrator exclude a custom endpoint application named “custom_app.exe” from being monitoring by Application File Access Control?

Options:

A.  

Add “custom_app.exe” to the “Application Whitelist” on all Endpoint servers.

B.  

Add “custom_app.exe” Application Monitoring Configuration and de-select all its channel options.

C.  

Add “custom_app_.exe” as a filename exception to the Endpoint Prevent policy.

D.  

Add “custom_app.exe” to the “Program Exclusion List” in the agent configuration settings.

Discussion 0
Question # 3

A DLP administrator is preparing to install Symantec DLP and has been asked to use an Oracle database provided by the Database Administration team.

Which SQL *Plus command should the administrator utilize to determine if the database is using a supported version of Oracle?

Options:

A.  

select database version from ;

B.  

select * from db$version;

C.  

select * from v$version;

D.  

select db$ver from ;

Discussion 0
Question # 4

Which product is able to replace a confidential document residing on a file share with a marker file explaining why the document was removed?

Options:

A.  

Network Discover

B.  

Cloud Service for Email

C.  

Endpoint Prevent

D.  

Network Protect

Discussion 0
Question # 5

A company needs to secure the content of all mergers and Acquisitions Agreements/ However, the standard text included in all company literature needs to be excluded.

How should the company ensure that this standard text is excluded from detection?

Options:

A.  

Create a Whitelisted.txt file after creating the Vector Machine Learning (VML) profile.

B.  

Create a Whitelisted.txt file after creating the Exact Data Matching (EDM) profile

C.  

Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile

D.  

Create a Whitelisted.txt file before creating the Exact Data Matching (EDM) profile

Discussion 0
Question # 6

Which option correctly describes the two-tier installation type for Symantec DLP?

Options:

A.  

Install the Oracle database on the host, and install the Enforce server and a detection server on a second host.

B.  

Install the Oracle database on a local physical host, and install the Enforce server and detection servers on virtual hosts in the Cloud.

C.  

Install the Oracle database and a detection server in the same host, and install the Enforce server on a second host.

D.  

Install the Oracle database and Enforce server on the same host, and install detection servers on separate hosts.

Discussion 0
Question # 7

Which two actions are available for a “Network Prevent: Remove HTTP/HTTPS content” response rule when the content is unable to be removed? (Choose two.)

Options:

A.  

Allow the content to be posted

B.  

Remove the content through FlexResponse

C.  

Block the content before posting

D.  

Encrypt the content before posting

E.  

Redirect the content to an alternative destination

Discussion 0
Question # 8

What detection technology supports partial contents matching?

Options:

A.  

Indexed Document Matching (IDM)

B.  

Described Content Matching (DCM)

C.  

Exact Data Matching (DCM)

D.  

Optical Character Recognition (OCR)

Discussion 0
Question # 9

Which detection server is available from Symantec as a hardware appliance?

Options:

A.  

Network Prevent for Email

B.  

Network Discover

C.  

Network Monitor

D.  

Network Prevent for Web

Discussion 0
Question # 10

What detection server is used for Network Discover, Network Protect, and Cloud Storage?

Options:

A.  

Network Protect Storage Discover

B.  

Network Discover/Cloud Storage Discover

C.  

Network Prevent/Cloud Detection Service

D.  

Network Protect/Cloud Detection Service

Discussion 0

Free Exams Sample Questions