Practice Free 250-587 Exam Online Questions
Which of the following is a good use case for Structured Data Identifiers (SDIs)?
- A . Detecting the copy of health care data (in tabular format) to USB from endpoint computers
- B . Detecting confidential financial data contained in XLSX or CSV email attachments
- C . Detecting partial sections of merger and acquisition documents in Network Discover scans
- D . Detecting single instances of Personally Identifiable Information (PII) in Endpoint Discover scans
Which tool must a DLP administrator run to certify the database prior to upgrading DLP?
- A . Enforce Migration Utility
- B . SymDiag
- C . Upgrade Readiness Tool
- D . Lob_Tablespace Reclamation Tool
Where in the Enforce management console can a DLP administrator change the “UI.NO_SCAN.int” setting to disable the “Inspecting Data” pop-up?
- A . Advanced Server Settings from the Endpoint Server Configuration
- B . Advanced Agent Settings from the Agent Configuration
- C . Application Monitoring from the Agent Configuration
- D . Advanced Monitoring from the Agent Configuration
A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked.
What is the first action an administrator should take to enable data transfers to the approved endpoint devices?
- A . Disable and re-enable the Endpoint Prevent policy to activate the changes
- B . Double-check that the correct device ID or class has been entered for each device
- C . Edit the exception rule to ensure that the “Match On” option is set to “Attachments”
- D . Verify Application File Access Control (AFAC) is configured to monitor the specific application
When managing an Endpoint Discover scan, a DLP administrator notices some endpoint computers are NOT completing their scans.
When does the DLP agent stop scanning?
- A . When the endpoint computer is rebooted and the agent is restarted
- B . When the agent sends a report within the “Scan Idle Timeout” period
- C . When the agent sends a report immediately after the “Scan Idle Timeout” period
- D . When the agent is unable to send a status report within the “Scan Idle Timeout” period
What detection server type requires a minimum of two physical network interface cards?
- A . Cloud Detection Service (CDS)
- B . Network Prevent for Email
- C . Network Prevent for Web
- D . Network Monitor
Which of the following actions can you implement ONLY as a Smart Response rule (and not as an automates response rule)?
- A . All: Limit Incident Data Retention
- B . Network Protect: SharePoint Release From Quarantine
- C . All: Set Attribute
- D . All: Add Note
Which detection server is available from Symantec as a hardware appliance?
- A . Network Prevent for Email
- B . Network Prevent for Web
- C . Network Monitor
- D . Network Discover
A company needs to secure the content of all Mergers and Acquisitions Agreements. However, the standard text included in all company literature needs to be excluded.
How should the company ensure that this standard text is excluded from detection?
- A . Create a Whitelisted.txt file after creating the Vector Machine Learning (VML) profile
- B . Create a Whitelisted.txt file before creating the Exact Data Matching (EDM) profile
- C . Create a Whitelisted.txt file after creating the Exact Data Matching (EDM) profile
- D . Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile
What is the correct routing order for data in motion when a customer has integrated their CloudSOC and DLP solutions?
- A . User > Enforce > CloudSOC > Application
- B . User > CloudSOC Gatelet > Enforce > Application
- C . User > CloudSOC Gatelet > DLP Cloud Detection Service > Application
- D . User > Enforce > Application