Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Symantec
Data Loss Prevention
250-438
Administration of Symantec Data Loss Prevention 15 Questions and Answers

Pass the Symantec Data Loss Prevention 250-438 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 250-438 Premium Access

View all detail and faqs for the 250-438 exam

Go to Exam

667 Students Passed

92% Average Score

95% Same Questions

Viewing page 2 out of 3 pages

Viewing questions 11-20 out of questions

Questions # 11:

Refer to the exhibit. Which type of Endpoint response rule is shown?

Question # 11

Options:

Endpoint Prevent: User Notification

Endpoint Prevent: Block

Endpoint Prevent: Notify

Endpoint Prevent: User Cancel

Answer

Explanation

References:

Questions # 12:

Which option correctly describes the two-tier installation type for Symantec DLP?

Options:

Install the Oracle database on the host, and install the Enforce server and a detection server on a second host.

Install the Oracle database on a local physical host, and install the Enforce server and detection servers on virtual hosts in the Cloud.

Install the Oracle database and a detection server in the same host, and install the Enforce server on a second host.

Install the Oracle database and Enforce server on the same host, and install detection servers on separate hosts.

Answer

Explanation

References:

Questions # 13:

Which two locations can Symantec DLP scan and perform Information Centric Encryption (ICE) actions on? (Choose two.)

Options:

Exchange

Jiveon

File store

SharePoint

Confluence

Answer

C, D

Explanation

References:

Questions # 14:

Which action should a DLP administrator take to secure communications between an on-premises Enforce server and detection servers hosted in the Cloud?

Options:

Use the built-in Symantec DLP certificate for the Enforce Server, and use the “sslkeytool” utility to create certificates for the detection servers.

Use the built-in Symantec DLP certificate for both the Enforce server and the hosted detection servers.

Set up a Virtual Private Network (VPN) for the Enforce server and the hosted detection servers.

Use the “sslkeytool” utility to create certificates for the Enforce server and the hosted detection servers.

Answer

Explanation

References:

Questions # 15:

What is the Symantec recommended order for stopping Symantec DLP services on a Windows Enforce server?

Options:

Vontu Notifier, Vontu Incident Persister, Vontu Update, Vontu Manager, Vontu Monitor Controller

Vontu Update, Vontu Notifier, Vontu Manager, Vontu Incident Persister, Vontu Monitor Controller

Vontu Incident Persister, Vontu Update, Vontu Notifier, Vontu Monitor Controller, Vontu Manager.

Vontu Monitor Controller, Vontu Incident Persister, Vontu Manager, Vontu Notifier, Vontu Update.

Answer

Explanation

References:

Questions # 16:

Which server target uses the “Automated Incident Remediation Tracking” feature in Symantec DLP?

Options:

Exchange

File System

Lotus Notes

SharePoint

Answer

Explanation

References:

Questions # 17:

A company needs to secure the content of all mergers and Acquisitions Agreements/ However, the standard text included in all company literature needs to be excluded.

How should the company ensure that this standard text is excluded from detection?

Options:

Create a Whitelisted.txt file after creating the Vector Machine Learning (VML) profile.

Create a Whitelisted.txt file after creating the Exact Data Matching (EDM) profile

Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile

Create a Whitelisted.txt file before creating the Exact Data Matching (EDM) profile

Answer

Explanation

References:

Questions # 18:

What detection server type requires a minimum of two physical network interface cards?

Options:

Network Prevent for Web

Network Prevent for Email

Network Monitor

Cloud Detection Service (CDS)

Answer

Questions # 19:

Refer to the exhibit.

Question # 19

What activity should occur during the baseline phase, according to the risk reduction model?

Options:

Define and build the incident response team

Monitor incidents and tune the policy to reduce false positives

Establish business metrics and begin sending reports to business unit stakeholders

Test policies to ensure that blocking actions minimize business process disruptions

Answer

Questions # 20:

A DLP administrator is checking the System Overview in the Enforce management console, and all of the detection servers are showing as “unknown”. The Vontu services are up and running on the detection servers. Thousands of .IDC files are building up in the Incidents directory on the detection servers. There is good network connectivity between the detection servers and the Enforce server when testing with the telnet command.

How should the administrator bring the detection servers to a running state in the Enforce management console?