Free Symantec 250-438 Exam Dumps Questions & Answers

A customer needs to integrate information from DLP incidents into external Governance, Risk and Compliance dashboards.
Which feature should a third party component integrate with to provide dynamic reporting, create custom incident remediation processes, or support business processes?

• A.Export incidents using the CSV format
• B.Incident Data Views
• C.A Web incident extraction report
• D.Incident Reporting and Update API

Which two DLP products support the new Optical Character Recognition (OCR) engine in Symantec DLP
15.0? (Choose two.)

• A.Cloud Service for Email
• B.Network Discover
• C.Cloud Detection Service
• D.Endpoint Prevent
• E.Network Prevent for Email

The Symantec Data Loss risk reduction approach has six stages.
Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

Correct Answer:

Explanation

References:

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

• A.Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration
• B.Modify the agent config.db to include the file
• C.Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected.
• D.Modify the agent configuration and select the option "retain Original Files"

Under the "System Overview" in the Enforce management console, the status of a Network Monitor detection server is shown as "Running Selected." The Network Monitor server's event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?

• A.The Network Monitor server's license file has expired.
• B.There is insufficient disk space on the Network Monitor server.
• C.The Network Monitor server's certificate is corrupt or missing.
• D.The Enforce and Network Monitor servers are running different versions of DLP.