Broadcom Symantec Data Loss Prevention 15.5 Technical Specialist Practice Tests and PDFs

A Chief Information Security Officer (CISO) wants to consolidate DLP Incident Remediation triage and follow up using a third-party Help Desk through Web Services. Which document advertises all of the available operations in the Incident Reporting and Update API? Response:

Which detection method should a DLP Administrator utilize to block files containing credit card numbers from being transferred from an endpoint computer to an external USB drive? Response:

Which Symantec DLP components are used for discovering sensitive data stored on-premises and in the cloud? (Select two) Response:

A company using Symantec DLP wants to ensure that employees do not upload confidential design blueprints to personal cloud storage services. Which feature should the administrator enable to monitor and control file uploads? Response:

Which two steps should an DLP Administrator take to analyze traffic over port 578 TCP? (Select two.) Response: HTTP. Server > Detector Detail > Configure. E. Enable Network Monitor detection for port 578 with a detection rule assigned to an active policy under Manage > Policy > Policy List.

A Network Monitor server has been installed. The server is receiving traffic but Enforce is NOT showing incidents. Running Wireshark indicates that the desired traffic is reaching the detection server. What is the most likely cause for this behavior? Response:

An incident responder sees basic incident data but is unable to view specific details of the incident. What could be wrong with the configuration in the incident responder's role? Response:

What Symantec Data Loss Prevention product can monitor and block FTP transmissions? Response:

Which key capabilities are essential for a Data Loss Prevention (DLP) solution? (Select two) Response:

Which response rule action will be ignored when using an Exact Data Matching (EDM) policy? Response: