Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

Symantec 250-587 - Symantec Data Loss Prevention 16.x Administration Technical Specialist

Symantec 250-587 Premium Access     Download Demo    
Page: 3 / 4
Total 108 questions

Which two detection technology options run on the DLP agent? (Choose two.)

A.

Optical Character Recognition (OCR)

B.

Described Content Matching (DCM)

C.

Directory Group Matching (DGM)

D.

Form Recognition

E.

Indexed Document Matching (IDM)

A company needs to implement Data Owner Exception so that incidents when employees send or receive their own personal information.

What detection method should the company use?

A.

Indexed Document Matching (IDM)

B.

Vector Machine Learning (VML)

C.

Exact data matching (EDM)

D.

Described Content matching (DCM)

What is Application Detection Configuration?

A.

The Cloud Detection Service (CDS) process that tells Enforce a policy has been violated

B.

The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CDC) for files in transit to or residing in Cloud apps

C.

The terminology describing the Data Loss Prevention (DLP) process within the CloudSOC administration portal

D.

the setting configured within the user interface (UI) that determines whether CloudSOC should send a file to Cloud Detection Service (CDS) for analysis.

How do Cloud Detection Service and the Enforce server communicate with each other?

A.

Enforce initiates communication with Cloud Detection Service, which is expecting connections on port 8100.

B.

Cloud Detection Service initiates communication with Enforce, which is expecting connections on port 443.

C.

Cloud Detection Service initiates communication with Enforce, which is expecting connections on port 1443.

D.

Enforce initiates communication with Cloud Detection Service, which is expecting connections on port 443.

What is the default fallback option for the Endpoint Prevent Encrypt response rule?

A.

Block

B.

User Cancel

C.

Encrypt

D.

Notify

A software company wants to protect its source code, including new source code created between scheduled indexing runs.

Which detection method should the company use to meet this requirement?

A.

Exact Data Matching (EDM)

B.

Described Content Matching (DCM)

C.

Vector Machine Learning (VML)

D.

Indexed Document Matching (IDM)

When Symantec DLP and Symantec CloudSOC are integrated, what must you configure in Enforce to tell CloudSOC which traffic or content to send to the Cloud Detection Service for analysis?

A.

DLP policies with CloudSOC-specific detection rules and response rules

B.

Cloud Detection Service traffic settings on the Servers and Detectors Overview page

C.

Traffic settings in the Agent Configuration for endpoint computers running the WSS Agent

D.

One or more Application Detection Configurations that include Gatelet and Securlet settings

Where do you configure the list of Endpoint Servers (or load balancers) to which a DLP Agent can report?

A.

In the Agent Package

B.

In the Agent Configuration

C.

In the Agent Group

D.

In the Agent Overview

Which two actions are available for a “Network Prevent: Remove HTTP/HTTPS content” response rule when the content is unable to be removed? (Choose two.)

A.

Allow the content to be posted

B.

Remove the content through FlexResponse

C.

Block the content before posting

D.

Encrypt the content before posting

E.

Redirect the content to an alternative destination

What is the first step an administrator should take to improve the performance of Network Monitor when network traffic exceeds 1 Gbps?

A.

Increase system memory (RAM) for existing Network Prevent servers.

B.

Add more Network Prevent servers to the Symantec DLP environment.

C.

Filter out all network traffic that is unreadable to Network Monitor.

D.

Install network taps and connect them to existing Network Monitor servers.