Symantec Data Loss Prevention 16.x Administration Technical Specialist Sample Questions:
1. A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked.
What is the first action an administrator should take to enable data transfers to the approved endpoint devices?
A) Disable and re-enable the Endpoint Prevent policy to activate the changes
B) Edit the exception rule to ensure that the "Match On" option is set to "Attachments"
C) Double-check that the correct device ID or class has been entered for each device
D) Verify Application File Access Control (AFAC) is configured to monitor the specific application
2. Refer to the exhibit.
What activity should occur during the baseline phase, according to the risk reduction model?
A) Monitor incidents and tune the policy to reduce false positives
B) Test policies to ensure that blocking actions minimize business process disruptions
C) Establish business metrics and begin sending reports to business unit stakeholders
D) Define and build the incident response team
3. Which product is able to replace a confidential document residing on a file share with a marker file explaining why the document was removed?
A) Cloud Service for Email
B) Network Discover
C) Endpoint Prevent
D) Network Protect
4. Which two components can perform a file system scan of a workstation? (Choose two.)
A) Discover Server
B) DLP Agent
C) Network Prevent for Web Server
D) Enforce Server
E) Endpoint Server
5. Which action is available for use in both Smart Response and Automated Response rules?
A) Log to a Syslog Server
B) Block email message
C) Modify SMTP message
D) Limit incident data retention
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: C | Question # 3 Answer: D | Question # 4 Answer: A,B | Question # 5 Answer: B |
1157 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
