Symantec
250-513 · Question #72
250-513 Question #72: Real Exam Question with Answer & Explanation
Sign in or unlock 250-513 to reveal the answer and full explanation for question #72. The question stem and answer options stay visible for context.
Question
An incident response team has determined that multiple incidents are resulting from the same user action of copying sensitive data to USB devices. Which action should the incident response team take to fix this issue so only one incident per action is detected?
Options
- Acreate separate policies for the different detection methods
- Bcombine multiple conditions into one compound rule
- Cchange which 'Endpoint Destinations' are monitored
- Dchange the monitor/ignore filters in the agent configuration
Unlock 250-513 to see the answer
You've previewed enough free 250-513 questions. Unlock 250-513 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.