A compliance officer needs to understand how the company is complying with its data security policies over time.
Which report should be compliance officer generate to obtain the compliance information?
An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization.
Which detection method should the organization use to meet this requirement?
A DLP administrator needs to remove an agent and its associated events from an Endpoint server.
Which Agent Task should the administrator perform to disable the agent’s visibility in the Enforce management console?
A software company wants to protect its source code, including new source code created between scheduled indexing runs.
Which detection method should the company use to meet this requirement?
What should an incident responder select in the Enforce management console to remediate multiple incidents simultaneously?
Which two (2) technologies should an organization utilize for integration with the Network Prevent products? (Choose two.)
Which two technologies should an organization utilize for integration with the Network Prevent products? (choose two.)
Where in the Enforce management console can a DLP administrator change the “UI.NO_SCAN.int” setting to disable the “Inspecting data” pop-up?
When managing an Endpoint Discover scan, a DLP administrator notices some endpoint computers are NOT completing their scans.
When does the DLP agent stop scanning?
A customer needs to integrate information from DLP incidents into external Governance, Risk and Compliance dashboards.
Which feature should a third party component integrate with to provide dynamic reporting, create custom incident remediation processes, or support business processes?
An administrator is unable to log in to the Enforce management console as “sysadmin”. Symantec DLP is configured to use Active Directory authentication. The administrator is a member of two roles: “sysadmin” and “remediator.”
How should the administrator log in to the Enforce console with the “sysadmin” role?
Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?
What is the correct order for data in motion when a customer has integrated their CloudSOC and DLP solutions?
Which two locations can Symantec DLP scan and perform Information Centric Encryption (ICE) actions on? (Choose two.)
What are two reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)
What are two (2) reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)
A customer needs to integrate information form DLP incidents into external Governance, Risk, and Compliance dashboards.
Which feature should a third-party component integrate with to provide dynamic reporting, create custom incident remediation processes, or support business processes?
Which two automated response rules will be active in policies that include Exact Data Matching (EDM) detection rule? (Choose two.)
The Symantec Data Loss risk reduction approach has six stages.
Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

Which action is available for use in both Smart Response and Automated Response rules?
What is the correct installation sequence for the components shown here, according to the Symantec Installation Guide?
Place the options in the correct installation sequence.

Which two Network Discover/Cloud Storage targets apply Information Centric Encryption as policy response rules?
Which type of response rule does Cloud Service for Email use to block confidential emails?
What is the Symantec recommended order for stopping Symantec DLP services on a Windows Enforce server?
A DLP administrator is testing Network Prevent for Web functionality. When the administrator posts a small test file to a cloud storage website, no new incidents are reported.
What should the administrator do to allow incidents to be generated against this file?