Free Symantec 250-438 Exam Dumps Questions & Answers

Which two actions are available for a "Network Prevent: Remove HTTP/HTTPS content" response rule when the content is unable to be removed? (Choose two.)

• A.  Remove the content through FlexResponse
• B.  Allow the content to be posted
• C.  Block the content before posting
• D.  Redirect the content to an alternative destination
• E.  Encrypt the content before posting

A DLP administrator needs to remove an agent its associated events from an Endpoint server.
Which Agent Task should the administrator perform to disable the agent's visibility in the Enforce management console?

• A.  Disable action from Symantec Management Console
• B.  Change endpoint Server action from the Agent Overview page
• C.  Delete action from the Agent health dashboard
• D.  Delete action from the Agent List page

A company needs to implement Data Owner Exception so that incidents when employees send or receive their own personal information.
What detection method should the company use?

• A.  Exact data matching (EDM)
• B.  Described Content matching (DCM)
• C.  Indexed Document Matching (IDM)
• D.  Vector Machine Learning (VML)

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?

• A.  Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected.
• B.  Modify the agent configuration and select the option "retain Original Files"
• C.  Modify the agent config.db to include the file
• D.  Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration

What detection technology supports partial row matching?

• A.  Exact data Matching (EDM)
• B.  described Content Matching (EDM)
• C.  Indexed Document Matching (IDM)
• D.  Vector Machine Learning (VML)