Multiple Choice
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?
A) Add a "Limit Incident Data Retention" response rule with "Retain Original Message" option selected.
B) Modify the agent config.db to include the file
C) Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration
D) Modify the agent configuration and select the option "Retain Original Files"
Correct Answer:
Verified
Correct Answer:
Verified
Q117: Which tool must a DLP administrator run
Q118: Which two automated response rules will be
Q119: Under the "System Overview" in the Enforce
Q120: Which action is available for use in
Q121: Where should an administrator set the debug
Q123: Which logs will help an administrator determine
Q124: Which statement accurately describes where Optical Character
Q125: Which URL must be accessed to successfully
Q126: Why would an administrator set the Similarity
Q127: Which detection method depends on "training sets"?<br>A)