Symantec
250-438 · Question #27
250-438 Question #27: Real Exam Question with Answer & Explanation
Sign in or unlock 250-438 to reveal the answer and full explanation for question #27. The question stem and answer options stay visible for context.
Question
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "copy to USB device" operation?
Options
- AAdd a "Limit Incident Data Retention" response rule with "Retain Original Message" option
- BModify the agent config.db to include the file
- CModify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration
- DModify the agent configuration and select the option "Retain Original Files"
Unlock 250-438 to see the answer
You've previewed enough free 250-438 questions. Unlock 250-438 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.