DSPM- Deploy-and-Administer Practice Exam Questions | Forcepoint DSPM

The correct selections are A, C, D, and E . A data classification and handling policy is a governance artifact that defines how data assets are categorized, owned, protected, reviewed, and aligned to legal or regulatory requirements. In Forcepoint DSPM, this sits within Policy Center and Compliance Hub , which are designed to support data classification, policy creation, security-control implementation, compliance, and risk reduction. Forcepoint states that Policy Center streamlines policy creation and prompts organizational representatives to provide information needed to build a governance framework aligned to organizational goals.

Specifying asset requirements maps to Data Mapping, where organizations define Data Asset Inventory fields and metadata such as retention period, business owner, regulatory scope, review status, and project name. Incorporating industry-specific regulations is required because departmental policy design must reflect obligations such as GDPR, HIPAA, and PCI DSS. Defining classification levels aligns to Taxonomy, where sensitivity levels such as Confidential, General Business, Public, and Highly Confidential are configured. Outlining roles and responsibilities aligns to assigning policy owners, department heads, representatives, and accountable stakeholders. Network traffic protocols are not a core step in creating a data classification and handling policy; they belong to network architecture or transport-control design, not data governance policy creation.

Select the Actions drop-down in the upper-right corner of the LDAP provider screen, then choose Sync all users or Sync changed users .

Manual synchronization is initiated from the LDAP provider configuration page inside Keycloak User Federation, not from the general DSPM dashboard or from the Users page. The correct UI location is the Actions menu at the upper-right of the LDAP provider screen. In the screenshot, this is the open drop-down containing options such as Sync all users , Sync changed users , Unlink users , and Remove imported . To force synchronization after a successful connection test, choose Sync all users for a full import or Sync changed users when only deltas are required.

Forcepoint DSPM uses Keycloak for Active Directory import. The official DSPM documentation states that AD users are added through Keycloak , with administrators selecting the gv realm, navigating to User Federation , and adding/configuring an LDAP provider. It also identifies synchronization settings such as Import users , Periodic full sync , and Periodic changed users sync as the mechanisms used to bring LDAP users into Keycloak and then into DSPM.

Therefore, the click target is the upper-right Actions drop-down on the LDAP provider page , specifically the sync command within that menu. References/topics: User Federation, LDAP Provider, Active Directory Import, Keycloak gv Realm, Synchronization Settings .