250-587問題集、Symantec実際の試験問題

質問 1

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP
15.0? (Choose two.)

A. Cloud Service for Email

B. Endpoint Prevent

C. Network Discover

D. Cloud Detection Service

E. Network Prevent for Email

正解: A,E

質問 2

A DLP administrator needs to stop the PacketCapture process on a detection server. Upon inspection of the Server Detail page, the administrator discovers that all processes are missing from the display.
What are the processes missing from the Server Detail page display?

A. The Advanced Process Control setting on the System Settings page is deselected.

B. The detection server Display Control Process option is disabled on the Server Detail page.

C. The detection server PacketCapture process is displayed on the Server Overview page.

D. The Display Process Control setting on the Advanced Settings page is disabled.

正解: D

質問 3

What are two (2) reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)

A. To specify the endpoint server

B. To specify Wi-Fi SSID names

C. To specify network card status (ON/OFF)

D. To specify domain names

E. To specify an IP address or range

正解: B,E

質問 4

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

A. Modify the agent configuration and select the option "retain Original Files"

B. Modify the agent config.db to include the file

C. Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration

D. Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected.

正解: D

質問 5

Which detection method depends on "training sets"?

A. Form Recognition

B. Vector Machine Learning (VML)

C. Exact Data Matching (IDM)

D. Index Document Matching (IDM)

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

A DLP administrator is attempting to add a new Network Discover detection server from the Enforce management console. However, the only available options are Network Monitor and Endpoint servers.
What should the administrator do to make the Network Discover option available?

A. Restart the Vontu Monitor Service

B. Apply a new software license file from the Enforce console

C. Install a new Network Discover detection server

D. Restart the Symantec DLP Controller service

正解: C

質問 7

Which two actions are available for a "Network Prevent: Remove HTTP/HTTPS content" response rule when the content is unable to be removed? (Choose two.)

A. Remove the content through FlexResponse

B. Allow the content to be posted

C. Encrypt the content before posting

D. Block the content before posting

E. Redirect the content to an alternative destination

正解: B,E

Symantec Data Loss Prevention 16.x Administration Technical Specialist - 250-587 模擬練習