File Info
| Exam | Administration of Symantec Data Loss Prevention 15 |
| Number | 250-438 |
| File Name | Symantec.250-438.SelfTestEngine.2019-10-14.42q.vcex |
| Size | 27 KB |
| Posted | Oct 14, 2019 |
| Download | Symantec.250-438.SelfTestEngine.2019-10-14.42q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which two Infrastructure-as-a-Service providers are supported for hosting Cloud Prevent for Office 365? (Choose two.)
- Any customer-hosted private cloud
- Amazon Web Services
- AT&T
- Verizon
- Rackspace
Correct answer: BE
Explanation:
Reference: https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/8000/DOC8244/en_US/Symantec_DLP_15.0_Cloud_Prevent_O365.pdf?__gda__=1554430310_584ffada3918e15ced8b6483a2bfb6fb (14) Reference: https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/8000/DOC8244/en_US/Symantec_DLP_15.0_Cloud_Prevent_O365.pdf?__gda__=1554430310_584ffada3918e15ced8b6483a2bfb6fb (14)
Question 2
A DLP administrator has enabled and successfully tested custom attribute lookups for incident data based on the Active Directory LDAP plugin. The Chief Information Security Officer (CISO) has attempted to generate a User Risk Summary report, but the report is empty. The DLP administrator confirms the Cisco’s role has the “User Reporting” privilege enabled, but User Risk reporting is still not working.
What is the probable reason that the User Risk Summary report is blank?
- Only DLP administrators are permitted to access and view data for high risk users.
- The Enforce server has insufficient permissions for importing user attributes.
- User attribute data must be configured separately from incident data attributes.
- User attributes have been incorrectly mapped to Active Directory accounts.
Correct answer: D
Question 3
How should a DLP administrator exclude a custom endpoint application named “custom_app.exe” from being monitoring by Application File Access Control?
- Add “custom_app.exe” to the “Application Whitelist” on all Endpoint servers.
- Add “custom_app.exe” Application Monitoring Configuration and de-select all its channel options.
- Add “custom_app_.exe” as a filename exception to the Endpoint Prevent policy.
- Add “custom_app.exe” to the “Program Exclusion List” in the agent configuration settings.
Correct answer: B
Explanation:
Reference: https://support.symantec.com/us/en/article.TECH220322.html Reference: https://support.symantec.com/us/en/article.TECH220322.html
Question 4
What detection server is used for Network Discover, Network Protect, and Cloud Storage?
- Network Protect Storage Discover
- Network Discover/Cloud Storage Discover
- Network Prevent/Cloud Detection Service
- Network Protect/Cloud Detection Service
Correct answer: B
Explanation:
Reference: https://help.symantec.com/cs/dlp15.0/DLP/v16110606_v120691346/Modifying-the-Network-Discover-Cloud-Storage-Discover-Server-configuration?locale=EN_US Reference: https://help.symantec.com/cs/dlp15.0/DLP/v16110606_v120691346/Modifying-the-Network-Discover-Cloud-Storage-Discover-Server-configuration?locale=EN_US
Question 5
Which two locations can Symantec DLP scan and perform Information Centric Encryption (ICE) actions on? (Choose two.)
- Exchange
- Jiveon
- File store
- SharePoint
- Confluence
Correct answer: CD
Explanation:
Reference: https://www.symantec.com/content/dam/symantec/docs/data-sheets/information-centric-encryption-en.pdf Reference: https://www.symantec.com/content/dam/symantec/docs/data-sheets/information-centric-encryption-en.pdf
Question 6
Which detection method depends on “training sets”?
- Form Recognition
- Vector Machine Learning (VML)
- Index Document Matching (IDM)
- Exact Data Matching (EDM)
Correct answer: B
Explanation:
Reference: http://eval.symantec.com/mktginfo/enterprise/white_papers/b-dlp_machine_learning.WP_en-us.pdf Reference: http://eval.symantec.com/mktginfo/enterprise/white_papers/b-dlp_machine_learning.WP_en-us.pdf
Question 7
Which option correctly describes the two-tier installation type for Symantec DLP?
- Install the Oracle database on the host, and install the Enforce server and a detection server on a second host.
- Install the Oracle database on a local physical host, and install the Enforce server and detection servers on virtual hosts in the Cloud.
- Install the Oracle database and a detection server in the same host, and install the Enforce server on a second host.
- Install the Oracle database and Enforce server on the same host, and install detection servers on separate hosts.
Correct answer: D
Explanation:
Reference: https://www.symantec.com/connect/forums/deployment-enforce-and-detection-servers Reference: https://www.symantec.com/connect/forums/deployment-enforce-and-detection-servers
Question 8
A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked.
What is the first action an administrator should take to enable data transfers to the approved endpoint devices?
- Disable and re-enable the Endpoint Prevent policy to activate the changes
- Double-check that the correct device ID or class has been entered for each device
- Verify Application File Access Control (AFAC) is configured to monitor the specific application
- Edit the exception rule to ensure that the “Match On” option is set to “Attachments”
Correct answer: D
Question 9
What is the default fallback option for the Endpoint Prevent Encrypt response rule?
- Block
- User Cancel
- Encrypt
- Notify
Correct answer: D
Question 10
Which two components can perform a file system scan of a workstation? (Choose two.)
- Endpoint Server
- DLP Agent
- Network Prevent for Web Server
- Discover Server
- Enforce Server
Correct answer: BD
