250-587 by Symantec Valid Free Exam Practice Test

Question 1

A software company wants to protect its source code, including new source code created between scheduled indexing runs.
Which detection method should the company use to meet this requirement?

A. Exact Data Matching (EDM) B. Indexed Document Matching (IDM) C. Vector Machine Learning (VML) D. Described Content Matching (DCM)

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

What are three features that are available for Network Discover File System High-Speed Discover (FS-HSD) scans but are NOT available for Network Discover (regular or legacy) File System scans?

A. Support for SMB v3, Symantec DLP REST APIs, and Internal Pause-Resume B. Incremental scans, scan scheduling, and incident replication scan status C. Symantec DLP REST APIs, incremental scans, and scan scheduling D. Support for SMB v3, Symantec DLP REST APIs, and incremental scans

Correct Answer: D

Question 3

Which Network Prevent action has taken place when a Network incident snapshot indicates the message has been "Modified"?

A. Obfuscate text in the body of an email B. Modify content from the body of an email C. Remove attachments from an email D. Add one or more SMTP headers to an email

Correct Answer: D

Question 4

A DLP administrator has performed a test deployment of the DLP 15.0 Endpoint agent and now wants to uninstall the agent. However, the administrator no longer remembers the uninstall password.
What should the administrator do to work around the password problem?

A. Manually delete all the Endpoint agent files from the test computer and install a new agent package. B. Apply a new global agent uninstall password in the Enforce management console. C. Replace the PGPsdk.dll file on the agent's assigned Endpoint server with a copy from a different Endpoint server D. Use the UninstallPwdGenerator to create an UninstallPasswordKey.

Correct Answer: D

Question 5

What should an incident responder select in the Enforce management console to remediate multiple incidents simultaneously?

A. Automated Response on the Incident Snapshot page B. Automated Response on an Incident List report C. Smart Response on the Incident Snapshot page D. Smart Response on an Incident List report

Correct Answer: D

Question 6

Which two (2) DLP products support Optical Character Recognition (OCR)? (Choose two.)

A. Endpoint Prevent B. Endpoint Discover C. Network Discover D. Network Prevent for Email E. Information Centric Analytics

Correct Answer: B,D

Question 7

What is Application Detection Configuration?

A. The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CDC) for files in transit to or residing in Cloud apps B. The terminology describing the Data Loss Prevention (DLP) process within the CloudSOC administration portal C. the setting configured within the user interface (UI) that determines whether CloudSOC should send a file to Cloud Detection Service (CDS) for analysis. D. The Cloud Detection Service (CDS) process that tells Enforce a policy has been violated

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

A compliance officer needs to understand how the company is complying with its data security policies over time.
Which report should be compliance officer generate to obtain the compliance information?

A. Policy report, filtered on date and summarized by policy B. Policy Trend report, summarized by policy, then severity C. Policy report, filtered on quarter and summarized by policy D. Policy Trend report, summarized by policy, then quarter

Correct Answer: A

Question 9

Which two factors are common sources of data leakage where the main actor is well-meaning insider?
(Choose two.)

A. Merger and Acquisition activities B. A disgruntled employee for a job with a competitor C. An absence of a trained incident response team D. Lack of training and awareness E. Broken business processes

Correct Answer: B,D

Question 10

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers.
What should the administrator do to make the Network Discover option available?

A. Restart the Vontu Monitor Service B. Apply a new software license file from the Enforce console C. Install a new Network Discover detection server D. Restart the Symantec DLP Controller service

Correct Answer: C

Symantec Data Loss Prevention 16.x Administration Technical Specialist - 250-587 Exam Practice Test