250-438問題集、Symantec実際の試験問題

質問 1

A DLP administrator has performed a test deployment of the DLP 15.0 Endpoint agent and now wants to uninstall the agent. However, the administrator no longer remembers the uninstall password.
What should the administrator do to work around the password problem?

A. Manually delete all the Endpoint agent files from the test computer and install a new agent package.

B. Replace the PGPsdk.dll file on the agent's assigned Endpoint server with a copy from a different Endpoint server

C. Apply a new global agent uninstall password in the Enforce management console.

D. Use the UninstallPwdGenerator to create an UninstallPasswordKey.

正解: D

質問 2

Under the "System Overview" in the Enforce management console, the status of a Network Monitor detection server is shown as "Running Selected." The Network Monitor server's event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?

A. The Network Monitor server's license file has expired.

B. There is insufficient disk space on the Network Monitor server.

C. The Enforce and Network Monitor servers are running different versions of DLP.

D. The Network Monitor server's certificate is corrupt or missing.

正解: C

質問 3

A DLP administrator determines that the \SymantecDLP\Protect\Incidents folder on the Enforce server contains. BAD files dated today, while other. IDC files are flowing in and out of the \Incidents directory. Only
.IDC files larger than 1MB are turning to .BAD files.
What could be causing only incident data smaller than 1MB to persist while incidents larger than 1MB change to .BAD files?

A. A detection server has excessive filereader restarts.

B. Tablespace is almost full.

C. The Enforce server's hard drive is out of space.

D. A corrupted policy was deployed.

正解: B

質問 4

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration.
What is one possible reason that the agent fails to receive the new configuration?

A. The new agent configuration was copied and modified from the default agent configuration.

B. The default agent configuration must be disabled before the new configuration can take effect.

C. The new agent configuration was saved but not applied to any endpoint groups.

D. The Endpoint server needs to be recycled so that the new agent configuration can take effect.

正解: B

質問 5

An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization.
Which detection method should the organization use to meet this requirement?

A. Described Content Matching (DCM)

B. Vector Machine Learning (VML)

C. Exact data Matching (EDM)

D. Indexed Document matching (IDM)

正解: B

質問 6

What detection method utilizes Data Identifiers?

A. Directory Group Matching (DGM)

B. Exact Data Matching (EDM)

C. Described Content Matching (DCM)

D. Indexed Document matching (IDM)

正解: B

質問 7

What are two reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)

A. To specify the endpoint server

B. To specify Wi-Fi SSID names

C. To specify network card status (ON/OFF)

D. To specify domain names

E. To specify an IP address or range

正解: D,E

Symantec Administration of Symantec Data Loss Prevention 15 - 250-438 模擬練習