Symantec DLP 250-587 Practice Questions & Answers • ExamPrepare

32 questions in this view

Page 1 of 6

Question 1

Refer to the exhibit. What activity should occur during the baseline phase, according to the risk reduction model?

style=

Monitor incidents and tune the policy to reduce false positives
Define and build the incident response team
Establish business metrics and begin sending reports to business unit stakeholders
Test policies to ensure that blocking actions minimize business process disruptions

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked.

What is the first action an administrator should take to enable data transfers to the approved endpoint devices?

Disable and re-enable the Endpoint Prevent policy to activate the changes
Double-check that the correct device ID or class has been entered for each device
Edit the exception rule to ensure that the "Match On" option is set to "Attachments"
Verify Application File Access Control (AFAC) is configured to monitor the specific application

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

How do Cloud Detection Service and the Enforce server communicate with each other?

Enforce initiates communication with Cloud Detection Service, which is expecting connections on port 8100.
Cloud Detection Service initiates communication with Enforce, which is expecting connections on port 443.
Enforce initiates communication with Cloud Detection Service, which is expecting connections on port 443.
Cloud Detection Service initiates communication with Enforce, which is expecting connections on port 8100.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Which detection server is available from Symantec as a hardware appliance?

Network Prevent for Email
Network Prevent for Web
Network Monitor
Network Discover

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Where do you configure the list of Endpoint Servers (or load balancers) to which a DLP Agent can report?

In the Agent Package
In the Agent Configuration
In the Agent Group
In the Agent Overview

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

During the tuning phase of a Vector Machine Learning (VML) profile, an administrator temporarily sets the Similarity Threshold to 0%. What is the primary purpose of this action?

To ensure that only documents perfectly matching the Negative set are blocked.
To trigger incidents only for documents that are 100% identical to the Positive set.
To generate incidents for all analyzed traffic, allowing the administrator to view the full distribution of scores for both positive and negative matches.
To disable the VML engine while maintaining the rest of the policy's detection rules

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.