250-587 by Symantec Actual Free Exam Questions And Answers

Question 1

Which Network Prevent action has taken place when a Network incident snapshot indicates the message has been "Modified"?

A. Add one or more SMTP headers to an email

B. Obfuscate text in the body of an email

C. Remove attachments from an email

D. Modify content from the body of an email

Discussion 0

Correct Answer: A Vote an answer

Question 2

When Symantec DLP is integrated with Microsoft Purview Information Protection (MPIP, also previously known as MIP), to which content types can the Mac DLP Agent apply MPIP labels (classification tags)?

A. Microsoft Word, Excel, and PowerPoint files; and Microsoft Outlook emails

B. Microsoft Word, Excel, and PowerPoint files; and Adobe PDF files

C. Microsoft Word, Excel, and PowerPoint files; Microsoft Outlook emails; and Adobe PDF files

D. Microsoft Word, Excel, and PowerPoint files

Discussion 0

Correct Answer: D Vote an answer

Question 3

Which option correctly describes the two-tier installation type for Symantec DLP?

A. Install the Oracle database and a detection server on the same host, and install the Enforce server on a second host.

B. Install the Oracle database on a local physical host, and install the Enforce server and detection servers on virtual hosts in the Cloud.

C. Install the Oracle database and Enforce server on the same host, and install detection servers on separate hosts.

D. Install the Oracle database on one host, and install the Enforce server and a detection server on a second host.

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which two automated response rules will be active in policies that include Exact Data Matching (EDM) detection rule? (Choose two.)

A. Network Protect: Quarantine File

B. Endpoint Prevent: Block

C. All: Send Email Notification

D. Endpoint Discover: Quarantine File

E. Endpoint Prevent: User Cancel

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

What is the correct installation sequence for the components shown here, according to the Symantec Installation Guide?
Place the options in the correct installation sequence.

Discussion 0

Correct Answer:

Explanation:

Question 6

Where in the Enforce management console can a DLP administrator change the "UI.NO_SCAN.int" setting to disable the "Inspecting data" pop-up?

A. Advanced Agent Settings from the Agent Configuration

B. Application Monitoring from the Agent Configuration

C. Advanced Server Settings from the Endpoint Server Configuration

D. Advanced Monitoring from the Agent Configuration

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

A DLP administrator is preparing to install Symantec DLP and has been asked to use an Oracle database provided by the Database Administration team.
Which SQL *Plus command should the administrator utilize to determine if the database is using a supported version of Oracle?

A. select * from db$version;

B. select database version from < database name > ;

C. select * from v$version;

D. select db$ver from < database name > ;

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

A DLP administrator determines that the \SymantecDLP\Protect\Incidents folder on the Enforce server contains. BAD files dated today, while other. IDC files are flowing in and out of the \Incidents directory.
Only .IDC files larger than 1MB are turning to .BAD files.
What could be causing only incident data smaller than 1MB to persist while incidents larger than 1MB change to .BAD files?

A. Tablespace is almost full.

B. The Enforce server's hard drive is out of space.

C. A detection server has excessive filereader restarts.

D. A corrupted policy was deployed.

Discussion 0

Correct Answer: A Vote an answer

Question 9

What detection technology supports partial contents matching?

A. Described Content Matching (DCM)

B. Exact Data Matching (EDM)

C. Indexed Document Matching (IDM)

D. Optical Character Recognition (OCR)

Discussion 0

Correct Answer: C Vote an answer

Question 10

What should an administrator do if DLP policies are generating too many false positives?

A. Disable all policies temporarily.

B. Refine detection methods, such as Exact Data Matching (EDM) and fingerprinting.

C. Allow users to approve exceptions manually.

D. Ignore incident reports until a critical issue arises.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Symantec Data Loss Prevention 16.x Administration Technical Specialist - 250-587 Exam Practice Test

Contact Us

Useful Links

Latest Updated