Administration of Symantec Data Loss Prevention 15

A DLP administrator needs to remove an agent its associated events from an Endpoint server.

Which Agent Task should the administrator perform to disable the agent's visibility in the Enforce management console?

Under the "System Overview" in the Enforce management console, the status of a Network Monitor detection server is shown as "Running Selected." The Network Monitor server's event logs indicate that the packet capture and filereader processes are crashing.

What is a possible cause for the Network Monitor server being in this state?

DRAG DROP

The Symantec Data Loss risk reduction approach has six stages.

Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

What is required on the Enforce server to communicate with the Symantec DLP database?

Which service encrypts the message when using a Modify SMTP Message response rule?

Which option is an accurate use case for Information Centric Encryption (ICE)?

Which two locations can Symantec DLP scan and perform Information Centric Encryption (ICE) actions on? (Choose two.)

A DLP administrator determines that the \SymantecDLP\Protect\Incidents folder on the Enforce server contains. BAD files dated today, while other. IDC files are flowing in and out of the \Incidents directory.
Only .IDC files larger than 1MB are turning to .BAD files.
What could be causing only incident data smaller than 1MB to persist while incidents larger than 1MB change to .
BAD files?

What should an incident responder select in the Enforce management console to remediate multiple incidents simultaneously?

Which two detection technology options ONLY run on a detection server? (Choose two.)