Symantec 250-438 Online Practice Questions and Exam Preparation

Symantec 250-438 Online Questions & Answers

• Question 31:

  What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?

  A. User > CloudSOC Gatelet > DLP Cloud Detection Service > Application
  B. User > Enforce > Application
  C. User > Enforce > CloudSOC > Application
  D. User > CloudSOC Gatelet > Enforce > Application
  C. User > Enforce > CloudSOC > Application

• Question 32:

  A software company wants to protect its source code, including new source code created between scheduled indexing runs. Which detection method should the company use to meet this requirement?

  A. Exact Data Matching (EDM)
  B. Described Content Matching (DCM)
  C. Vector Machine Learning (VML)
  D. Indexed Document Matching (IDM)
  D. Indexed Document Matching (IDM)

  ---

  Reference: https://help.symantec.com/cs/DLP15.0/DLP/v100774847_v120691346/Scheduling-remote-indexing?locale=EN_US

• Question 33:

  A compliance officer needs to understand how the company is complying with its data security policies over time. Which report should be compliance officer generate to obtain the compliance information?

  A. Policy report, filtered on date and summarized by policy
  B. Policy Trend report, summarized by policy, then quarter
  C. Policy report, filtered on quarter and summarized by policy
  D. Policy Trend report, summarized by policy, then severity
  A. Policy report, filtered on date and summarized by policy

• Question 34:

  A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration. What is one possible reason that the agent fails to receive the new configuration?

  A. The new agent configuration was saved but not applied to any endpoint groups.
  B. The new agent configuration was copied and modified from the default agent configuration.
  C. The default agent configuration must be disabled before the new configuration can take effect.
  D. The Endpoint server needs to be recycled so that the new agent configuration can take effect.
  C. The default agent configuration must be disabled before the new configuration can take effect.

• Question 35:

  Which service encrypts the message when using a Modify SMTP Message response rule?

  A. Network Monitor server
  B. SMTP Prevent
  C. Enforce server
  D. Encryption Gateway
  D. Encryption Gateway

  ---

  Reference: https://www.symantec.com/connect/articles/network-prevent

• Question 36:

  Which two detection technology options run on the DLP agent? (Choose two.)

  A. Optical Character Recognition (OCR)
  B. Described Content Matching (DCM)
  C. Directory Group Matching (DGM)
  D. Form Recognition
  E. Indexed Document Matching (IDM)
  B. Described Content Matching (DCM)
  E. Indexed Document Matching (IDM)

• Question 37:

  A company needs to secure the content of all Mergers and Acquisitions Agreements However, the standard text included in all company literature needs to be excluded. How should the company ensure that this standard text is excluded from detection?

  A. Create a Whitelisted.txt file after creating the Vector Machine Learning (VML) profile.
  B. Create a Whitelisted.txt file after creating the Exact Data Matching (EDM) profile
  C. Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile
  D. Create a Whitelisted.txt file before creating the Exact Data Matching (EDM) profile
  C. Create a Whitelisted.txt file before creating the Indexed Document Matching (IDM) profile

  ---

  Reference: https://help.symantec.com/cs/dlp15.0/DLP/v27161240_v120691346/White-listing-file-contents-to-exclude-from-partial-matching?locale=EN_US

• Question 38:

  DRAG DROP

  What is the correct installation sequence for the components shown here, according to the Symantec Installation Guide?

  Place the options in the correct installation sequence.

  Select and Place:

  

  

• Question 39:

  A DLP administrator needs to remove an agent its associated events from an Endpoint server.

  Which Agent Task should the administrator perform to disable the agent's visibility in the Enforce management console?

  A. Delete action from the Agent Health dashboard
  B. Delete action from the Agent List page
  C. Disable action from Symantec Management Console
  D. Change Endpoint Server action from the Agent Overview page
  C. Disable action from Symantec Management Console

• Question 40:

  A DLP administrator is checking the System Overview in the Enforce management console, and all of the detection servers are showing as "unknown". The Vontu services are up and running on the detection servers. Thousands of .IDC files are building up in the Incidents directory on the detection servers. There is good network connectivity between the detection servers and the Enforce server when testing with the telnet command.

  How should the administrator bring the detection servers to a running state in the Enforce management console?

  A. Restart the Vontu Update Service on the Enforce server
  B. Ensure the Vontu Monitor Controller service is running in the Enforce server
  C. Delete all of the .BAD files in the Incidents folder on the Enforce server
  D. Restart the Vontu Monitor Service on all the affected detection servers
  B. Ensure the Vontu Monitor Controller service is running in the Enforce server