File Info
| Exam | Administration of Symantec Data Loss Prevention 15 |
| Number | 250-438 |
| File Name | Symantec.250-438.CertKey.2019-07-25.31q.tqb |
| Size | 286 KB |
| Posted | Jul 25, 2019 |
| Download | Symantec.250-438.CertKey.2019-07-25.31q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a “copy to USB device” operation?
- Add a “Limit Incident Data Retention” response rule with “Retain Original Message” option selected.
- Modify the agent config.db to include the file
- Modify the “Endpoint_Retain_Files.int” setting in the Endpoint server configuration
- Modify the agent configuration and select the option “Retain Original Files”
Correct answer: A
Question 2
What is the correct configuration for “BoxMonitor.Channels” that will allow the server to start as a Network Monitor server?
- Packet Capture, Span Port
- Packet Capture, Network Tap
- Packet Capture, Copy Rule
- Packet capture, Network Monitor
Correct answer: C
Explanation:
Reference: https://support.symantec.com/en_US/article.TECH218980.html Reference: https://support.symantec.com/en_US/article.TECH218980.html
Question 3
Under the “System Overview” in the Enforce management console, the status of a Network Monitor detection server is shown as “Running Selected.” The Network Monitor server’s event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?
- There is insufficient disk space on the Network Monitor server.
- The Network Monitor server’s certificate is corrupt or missing.
- The Network Monitor server’s license file has expired.
- The Enforce and Network Monitor servers are running different versions of DLP.
Correct answer: D
