250-438 Symantec Exam Questions and Free Practice Test

Question 13

An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization.
Which detection method should the organization use to meet this requirement?

A. Exact Data Matching (EDM)

B. Indexed Document Matching (IDM)

C. Described Content Matching (DCM)

D. Vector Machine Learning (VML)

Correct Answer:D

Question 14

What detection server type requires a minimum of two physical network interface cards?

A. Network Prevent for Web

B. Network Prevent for Email

C. Network Monitor

D. Cloud Detection Service (CDS)

Correct Answer:A

Question 15

A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked. What is the first action an administrator should take to enable data transfers to the approved endpoint devices?

A. Disable and re-enable the Endpoint Prevent policy to activate the changes

B. Double-check that the correct device ID or class has been entered for each device

C. Verify Application File Access Control (AFAC) is configured to monitor the specific application

D. Edit the exception rule to ensure that the “Match On” option is set to “Attachments”

Correct Answer:D

Question 16

Why is it important for an administrator to utilize the grid scan feature?

A. To distribute the scan workload across multiple network discover servers

B. To distribute the scan workload across the cloud servers

C. To distribute the scan workload across multiple endpoint servers

D. To distribute the scan workload across multiple detection servers

Correct Answer:D
If you plan to use the grid scanning feature to distribute the scanning workload across multiple detection servers, retain the default value (1)

START 250-438 EXAM