250-438 Free Practice Test

Which two detection technology options ONLY run on a detection server? (Choose two.)

1. A. Form Recognition
2. B. Indexed Document Matching (IDM)
3. C. Described Content Matching (DCM)
4. D. Exact Data Matching (EDM)
5. E. Vector Machine Learning (VML)

Correct Answer: BD
Reference: https://support.symantec.com/en_US/article.INFO5070.html

What is the default fallback option for the Endpoint Prevent Encrypt response rule?

1. A. Block
2. B. User Cancel
3. C. Encrypt
4. D. Notify

Correct Answer: D

Which tool must a DLP administrator run to certify the database prior to upgrading DLP?

1. A. Lob_Tablespace Reclamation Tool
2. B. Upgrade Readiness Tool
3. C. SymDiag
4. D. EnforceMigrationUtility

Correct Answer: B
Reference: https://support.symantec.com/en_US/article.DOC10667.html

What detection technology supports partial row matching?

1. A. Vector Machine Learning (VML)
2. B. Indexed Document Matching (IDM)
3. C. Described Content Matching (DCM)
4. D. Exact Data Matching (EDM)

Correct Answer: D
Reference: https://www.slideshare.net/iftikhariqbal/technology-overview-symantec-data-loss-prevention-dlp

A DLP administrator has added several approved endpoint devices as exceptions to an Endpoint Prevent policy that blocks the transfer of sensitive data. However, data transfers to these devices are still being blocked. What is the first action an administrator should take to enable data transfers to the approved endpoint devices?

1. A. Disable and re-enable the Endpoint Prevent policy to activate the changes
2. B. Double-check that the correct device ID or class has been entered for each device
3. C. Verify Application File Access Control (AFAC) is configured to monitor the specific application
4. D. Edit the exception rule to ensure that the “Match On” option is set to “Attachments”

Correct Answer: D