Symantec Data Loss Prevention 10.5 (STS)

1.

To which file system folder does PacketCapture write reconstructed SMTP messages?

drop drop_pcap drop_discover drop_smtp

2.

What is the sequence of message processing for Network Monitor?

Packet Capture -> File Reader -> Detection -> Incident Writer

Monitor Controller -> Detection -> File Reader -> Incident Writer

File Reader -> IncidentPersister -> Manager -> Notifier

Request Processor -> Packet Capture -> File Reader -> Detection

3.

Which component has an obfuscated (hidden) log?

Endpoint Agent Enforce Server Network Monitor Network Discover

4.

By default, which port does the Enforce Server use to communicate with all detection servers?

443 8000 8100 8300

5.

Where should the Network Discover detection server be placed in a typical corporate network architecture?

in the DMZ outside the perimeter firewall inside the corporate network on an isolated network segment

6.

The data loss prevention team needs to scan file shares that are located in Atlanta, Los Angeles, and Brazil. What is the most effective plan for identifying confidential and sensitive information on these files shares?

deploy a single Enforce Server and a single Network Discover Server deploy an Enforce server at each location and a single Network Discover Server deploy a single Enforce Server and a Network Discover Server at each location deploy a single Enforce Server and a single Network Protect Server

7.

Which situation can be monitored by both Network Monitor and Endpoint Prevent?

An employee uses a Chrome 2 browser to post confidential data to a newsgroup via http. An employee uses Skype to send an instant message to a friend at a competitor site. An employee uses AIM to send an instant message while off the corporate network. An employee uses Internet Explorer 7 to send confidential data from a Gmail account via https.

8.

By default, which application or destination are selected for endpoint monitoring?

email removable storage instant messaging local drive

9.

Where can a Data Loss Prevention administrator configure the throttling option for a DLP Agent?

Symantec Management Platform Discover Target Configuration page Agent Configuration section AgentFiltering section

10.

When installing a Network Monitor, which third-party application needs to be installed for it to function properly?

WireShark on a Windows Server Endace driver on a Linux server WinPcap on a Windows Server Ethereal on a Linux server

Symantec Data Loss Prevention 10.5 (STS)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Symantec Data Loss Prevention 10.5 (STS)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner