What is the default fallback option for the Endpoint Prevent Encrypt response rule?
Which two (2) DLP products support Optical Character Recognition (OCR)? (Choose two.)
Which two (2) detection technology options run ONLY on detection servers and NOT on endpoint agents? (Choose two.)
When managing an Endpoint Discover scan, a DLP administrator notices some endpoint computers are NOT completing their scans.
When does the DLP agent stop scanning?
What is required on the Enforce server to communicate with the Symantec DLP database?
A company needs to implement Data Owner Exception so that incidents when employees send or receive their own personal information.
What detection method should the company use?
What are two reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)
Which action should a DLP administrator take to secure communications between an on-premises Enforce server and detection servers hosted in the Cloud?
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a “cope to USB device” operation?
A DLP administrator needs to stop the PacketCapture process on a detection server. Upon inspection of the Server Detail page, the administrator discovers that all processes are missing from the display.
What are the processes missing from the Server Detail page display?
Which of the following actions can you implement ONLY as a Smart Response rule (and not as an automates response rule)?
An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization.
Which detection method should the organization use to meet this requirement?
Which Network Prevent action has taken place when a Network incident snapshot indicates the message has been “Modified”?
Which option correctly describes the two-tier installation type for Symantec DLP?
An administrator is unable to log in to the Enforce management console as “sysadmin”. Symantec DLP is configured to use Active Directory authentication. The administrator is a member of two roles: “sysadmin” and “remediator.”
How should the administrator log in to the Enforce console with the “sysadmin” role?
Which two (2) detection servers are available as virtual appliances? (Choose two.)
Under the “System Overview” in the Enforce management console, the status of a Network Monitor detection server is shown as “Running Selected.” The Network Monitor server’s event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?
Which option correctly describes the two-tier installation type for Symantec DLP?
Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?
How should a DLP administrator exclude a custom endpoint application named “custom_app.exe” from being monitored by Application File Access Control?
What are two (2) reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)