We're so confident of our products that we provide no hassle product exchange.
Symantec 250-587 Exam Overview:
| Certification Vendor: | Broadcom (formerly Symantec) |
|---|---|
| Exam Name: | Symantec Data Loss Prevention 16.x Administration Technical Specialist |
| Exam Number: | 250-587 |
| Exam Format: | Multiple choice, Multiple select |
| Related Certifications: | Symantec Data Loss Prevention 15.5 Administration Technical Specialist (250-553) |
| Certificate Validity Period: | 3 years |
| Available Languages: | English |
| Real Exam Qty: | 70 |
| Exam Price: | $250 USD |
| Passing Score: | 70% |
| Exam Duration: | 90 minutes |
| Recommended Training: | Symantec Data Loss Prevention 16.x Administration Training |
| Exam Registration: | Broadcom Certification Portal |
| Sample Questions: | Symantec 250-587 Sample Questions |
| Exam Way: | Online proctored or onsite testing center |
| Pre Condition: | 6–12 months of hands-on experience with Symantec DLP; recommended completion of official administration training |
| Official Syllabus URL: | https://www.broadcom.com/support/education/software/certification/exams/exam-250-587 |
Symantec 250-587 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Incident Management and Response | 15% | - Remediation actions and smart responses - Reporting, analytics, and risk assessment - Incident review, workflow, and status management |
| Troubleshooting and Integration | 8% | - Integration with other security solutions - Diagnosing common issues in servers, agents, and detection |
| Policy Configuration and Management | 25% | - Policy creation, tuning, and maintenance - Data identification techniques: DCM, EDM, IDM, VML - Rule sets, exceptions, and response rules |
| System Administration and Maintenance | 12% | - Agent management and deployment - User roles, permissions, and access control - Backup, upgrade, and performance tuning |
| Architecture and Deployment | 20% | - Server and agent installation and configuration - Planning and deployment strategies - DLP solution components and architecture |
| Detection Technologies | 20% | - Endpoint Prevent and Endpoint Discover - Network Monitor and Network Prevent - Network Discover and Network Protect - Cloud integration and detection |
Symantec Data Loss Prevention 16.x Administration Technical Specialist Sample Questions:
Which service encrypts the message when using a Modify SMTP Message response rule?
- A. Encryption Gateway
- B. Network Monitor server
- C. SMTP Prevent
- D. Enforce server
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which two detection technology options ONLY run on a detection server? (Choose two.)
- A. Indexed Document matching (IDM)
- B. Exact data matching (EDM)
- C. vector Machine Learning (VML)
- D. Form Recognition
- E. Described Content Matching (DCM)
Correct Answer: A,B 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
An organization wants to restrict employees to copy files only a specific set of USB thumb drives owned by the organization.
Which detection method should the organization use to meet this requirement?
- A. Vector Machine Learning (VML)
- B. Exact data Matching (EDM)
- C. Indexed Document matching (IDM)
- D. Described Content Matching (DCM)
Correct Answer: A 🗳️
A DLP administrator is testing Network Prevent for Web functionality. When the administrator posts a small test file to a cloud storage website, no new incidents are reported.
What should the administrator do to allow incidents to be generated against this file?
- A. Change the "PacketCapture.DISCARD_HTTP_GET" value to "false"
- B. Uncheck trial mode under the ICAP tab
- C. Add the filename to the Inspect Content Type field
- D. Change the "Ignore requests Smaller Than" value to 1
Correct Answer: D 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which two factors are common sources of data leakage where the main actor is well-meaning insider?
(Choose two.)
- A. A disgruntled employee for a job with a competitor
- B. Lack of training and awareness
- C. Broken business processes
- D. Merger and Acquisition activities
- E. An absence of a trained incident response team
Correct Answer: A,B 🗳️
Viewing page 1 out of 22 pages.
Viewing questions 1-5 out of 110 questions.
By Laura
