250-438 Exam Training Practice Tests (Symantec Administration of Symantec Data Loss Prevention 15)]

Question 1

A DLP administrator has performed a test deployment of the DLP 15.0 Endpoint agent and now wants to uninstall the agent. However, the administrator no longer remembers the uninstall password.
What should the administrator do to work around the password problem?

A. Replace the PGPsdk.dll file on the agent's assigned Endpoint server with a copy from a different Endpoint server B. Use the UninstallPwdGenerator to create an UninstallPasswordKey. C. Apply a new global agent uninstall password in the Enforce management console. D. Manually delete all the Endpoint agent files from the test computer and install a new agent package.

Correct Answer: B

Question 2

Which two detection technology options run on the DLP agent? (Choose two.)

A. Form Recognition B. Indexed Document Matching (IDM) C. Directory Group Matching (DGM) D. Optical Character Recognition (OCR) E. Described Content Matching (DCM)

Correct Answer: A,B

Question 3

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP
15.0? (Choose two.)

A. Network Discover B. Network Prevent for Email C. Endpoint Prevent D. Cloud Detection Service E. Cloud Service for Email

Correct Answer: B,E

Question 4

A DLP administrator has enabled and successfully tested custom attribute lookups for incident data based on the Active Directory LDAP plugin. The Chief Information Security Officer (CISO) has attempted to generate a User Risk Summary report, but the report is empty. The DLP administrator confirms the Cisco's role has the
"User Reporting" privilege enabled, but User Risk reporting is still not working.
What is the probable reason that the User Risk Summary report is blank?

A. The Enforce server has insufficient permissions for importing user attributes. B. User attribute data must be configured separately from incident data attributed. C. Only DLP administrators are permitted to access and view data for high risk users. D. User attributes have been incorrectly mapped to Active Directory accounts.

Correct Answer: D

Question 5

The Symantec Data Loss risk reduction approach has six stages.
Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

Correct Answer:

Explanation

References:

Question 6

Which action is available for use in both Smart Response and Automated Response rules?

A. Limit incident data retention B. Log to a Syslog Server C. Block email message D. Modify SMTP message

Correct Answer: C

Question 7

Which option is an accurate use case for Information Centric Encryption (ICE)?

A. The ICE utility encrypts files matching DLP policy being copied from network share through use of certificates B. The ICE utility encrypts files matching DLP policy being copied from network share through use of encryption keys. C. The ICE utility encrypts files matching DLP policy being copied to removable storage through use of encryption keys. D. The ICE utility encrypts files matching DLP policy being copied to removable storage on an endpoint use of certificates.

Correct Answer: C

Symantec Administration of Symantec Data Loss Prevention 15 - 250-438 Exam Practice Test