Broadcom Administration of Symantec Data Loss Prevention 15 250-438 Exam Questions

A DLP administrator determines that the SymantecDLPProtectIncidents folder on the Enforce server contains. BAD files dated today, while other. IDC files are flowing in and out of the Incidents directory. Only .IDC files larger than 1MB are turning to .BAD files.

What could be causing only incident data smaller than 1MB to persist while incidents larger than 1MB change to .BAD files?

Which two components can perform a file system scan of a workstation? (Choose two.)

Which action is available for use in both Smart Response and Automated Response rules?

An administrator is unable to log in to the Enforce management console as “sysadmin”. Symantec DLP is configured to use Active Directory authentication. The administrator is a member of two roles: “sysadmin” and “remediator.”

How should the administrator log in to the Enforce console with the “sysadmin” role?

Which server target uses the “Automated Incident Remediation Tracking” feature in Symantec DLP?

Which option correctly describes the two-tier installation type for Symantec DLP?

What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?