How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?

Question

Options

• AAdd a "Limit Incident Data Retention" response rule with "Retain Original Message" option
• BModify the agent config.db to include the file
• CModify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration
• DModify the agent configuration and select the option "Retain Original Files"

• A
  81% (26)
• B
  6% (2)
• C
  3% (1)
• D
  9% (3)

No community discussion yet for this question.