250-438 exam

What is Application Detection Configuration?A . The Cloud Detection Service (CDS) process that tells Enforce a policy has been violatedB . The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CDC) for files in transit to or residing in Cloud appsC . The terminology describing...

Which option correctly describes the two-tier installation type for Symantec DLP?A . Install the Oracle database on the host, and install the Enforce server and a detection server on a second host.B . Install the Oracle database on a local physical host, and install the Enforce server and detection servers...

Under the “System Overview” in the Enforce management console, the status of a Network Monitor detection server is shown as “Running Selected.” The Network Monitor server’s event logs indicate that the packet capture and filereader processes are crashing. What is a possible cause for the Network Monitor server being in...

Which two detection technology options run on the DLP agent? (Choose two.)A . Optical Character Recognition (OCR)B . Described Content Matching (DCM)C . Directory Group Matching (DGM)D . Form RecognitionE . Indexed Document Matching (IDM)View AnswerAnswer: BE

How should a DLP administrator exclude a custom endpoint application named “custom_app.exe” from being monitoring by Application File Access Control?A . Add “custom_app.exe” to the “Application Whitelist” on all Endpoint servers.B . Add “custom_app.exe” Application Monitoring Configuration and de-select all its channel options.C . Add “custom_app_.exe” as a filename exception...

Which detection method depends on “training sets”?A . Form RecognitionB . Vector Machine Learning (VML)C . Index Document Matching (IDM)D . Exact Data Matching (IDM)View AnswerAnswer: B Explanation: Reference: http://eval.symantec.com/mktginfo/enterprise/white_papers/b-dlp_machine_learning.WP_en­us.pdf

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a “cope to USB device” operation?A . Add a “Limit Incident Data Retention” response rule with “retain Original Message” option selected.B . Modify the agent config.db to include the...

What detection server is used for Network Discover, Network Protect, and Cloud Storage?A . Network Protect Storage DiscoverB . Network Discover/Cloud Storage DiscoverC . Network Prevent/Cloud Detection ServiceD . Network Protect/Cloud Detection ServiceView AnswerAnswer: B Explanation: Reference: https://help.symantec.com/cs/dlp15.0/DLP/v16110606_v120691346/Modifying-the-Network­Discover-Cloud-Storage-Discover-Server-configuration?locale=EN_US

Which two Infrastructure-as-a-Service providers are supported for hosting Cloud Prevent for Office 365? (Choose two.)A . Any customer-hosted private cloudB . Amazon Web ServicesC . AT&TD . VerizonE . RackspaceView AnswerAnswer: BE Explanation: Reference: https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/ DOCUMENTATION/8000/DOC8244/en_US/Symantec_DLP_15.0_Cloud_Prevent_O365.pdf? __gda__=1554430310_584ffada3918e15ced8b6483a2bfb6fb (14)

A DLP administrator needs to stop the PacketCapture process on a detection server. Upon inspection of the Server Detail page, the administrator discovers that all processes are missing from the display. What are the processes missing from the Server Detail page display?A . The Display Process Control setting on the...