Are you IT person? Do you want to succeed? If you want to succeed, please do to buy ITCertKing's Symantec 250-511 exam training materials. Our training materials have through the test of practice. it can help you to pass the IT exam. With the ITCertKing's Symantec 250-511 exam training materials, you will have better development in the IT industry. You can enjoy the treatment of high-level white-collar, and you can carve out a new territory in the internation. Are you still worried about your exam? ITCertKing's Symantec 250-511 exam training materials will satisfy your desire. We are through thick and thin with you and to accept this challenge together .
ITCertKing's providing training material is very close to the content of the formal examination. Through our short-term special training You can quickly grasp IT professional knowledge, and then have a good preparation for your exam. We promise that we will do our best to help you pass the Symantec certification 250-511 exam.
More and more people choose Symantec 250-511 exam. Because of its popularity, you can use the ITCertKing Symantec 250-511 exam questions and answers to pass the exam. This will bring you great convenience and comfort. This is a practice test website. It is available on the Internet with the exam questions and answers, as we all know, ITCertKing is the professional website which provide Symantec 250-511 exam questions and answers.
ITCertKing can provide professional and high quality products. It is the industry leader in providing IT certification information. To selecte ITCertKing is to choose success. ITCertKing's Symantec 250-511 exam training materials is your magic weapon to success. With it, you will pass the exam and achieve excellent results, towards your ideal place.
Exam Code: 250-511
Exam Name: Symantec (Administration of Symantec(TM) Data Loss Prevention 11)
One year free update, No help, Full refund!
Total Q&A: 176 Questions and Answers
Last Update: 2014-01-29
ITCertKing not only have a high reliability, but also provide a good service. If you choose ITCertKing, but don't pass the exam, we will 100% refund full of your cost to you. ITCertKing also provide you with a free update service for one year.
In the information era, IT industry is catching more and more attention. In the society which has a galaxy of talents, there is still lack of IT talents. Many companies need IT talents, and generally, they investigate IT talents's ability in according to what IT related authentication certificate they have. So having some IT related authentication certificate is welcomed by many companies. But these authentication certificate are not very easy to get. Symantec 250-511 is a quite difficult certification exams. Although a lot of people participate in Symantec 250-511 exam, the pass rate is not very high.
You can now get Symantec 250-511 exam certification our ITCertKing have the full version of Symantec 250-511 exam. You do not need to look around for the latest Symantec 250-511 training materials, because you have to find the best Symantec 250-511 training materials. Rest assured that our questions and answers, you will be completely ready for the Symantec 250-511 certification exam.
250-511 Free Demo Download: http://www.itcertking.com/250-511_exam.html
NO.1 A role is configured for XML export and a user executes the export XML incident action. What must be
done before history information is included in the export?
A. A remediator must take an action on the incident.
B. History must be enabled as a tab or panel in the incident snapshot layout.
C. Incident history must be enabled in the user's role.
D. The manager.properties must be configured for XML export.
Answer: C
Symantec 250-511 original questions 250-511 250-511 certification
NO.2 What is a feature of keyword proximity matching?
A. It will match on whole keywords only.
B. It has a maximum distance between keywords of 99.
C. It only matches on message body.
D. It evaluates each keyword pair independently.
Answer: D
Symantec practice test 250-511 exam 250-511 250-511 250-511
NO.3 A company needs to scan all of its file shares on a weekly basis to make sure sensitive data is being
stored correctly. The total volume of data on the file servers is greater than 1 TB. Which approach will
allow the company to quickly scan all of this data on a weekly basis?
A. run an initial complete scan of all the file shares, then modify the scan target to add date filters and
exclude any files created or modified before the initial scan was run
B. run an initial complete scan of all the file shares, then modify the scan target to an incremental scan
type
C. create a separate scan target for each file share and exclude files accessed before the start of each
scan
D. run an initial complete scan of all file shares, create a summary report of all incidents created by the
scan, then run weekly scans and compare incidents from weekly scans to incidents from the complete
scan
Answer: B
Symantec pdf 250-511 answers real questions 250-511 test 250-511 exam prep 250-511 250-511
NO.4 Which product provides support for the Citrix XenApp virtualization platform?
A. Endpoint Prevent
B. Network Discover
C. Network Protect
D. Network Prevent
Answer: A
Symantec test 250-511 pdf 250-511 test questions 250-511 250-511 dumps
NO.5 What must a policy manager do when working with Exact Data Matching (EDM) indexes?
A. re-index large data sources on a daily or weekly basis
B. index the original data source on the detection server
C. deploy the index only to specific detection servers
D. create a new data profile if data source schema changes
Answer: D
Symantec braindump 250-511 250-511 250-511 original questions 250-511 exam
NO.6 Which Network Discover option is used to determine whether confidential data exists without having to
scan the entire target?
A. Byte Throttling
B. File Throttling
C. Match Thresholds
D. Inventory Mode Scanning
Answer: D
Symantec exam 250-511 braindump 250-511 exam
NO.7 A divisional executive requests a report of all incidents generated by a particular region, summarized
by department. What must be populated to generate this report?
A. remediation attributes
B. sender correlations
C. status groups
D. custom attributes
Answer: D
Symantec practice test 250-511 test questions 250-511 test 250-511 250-511
NO.8 How can an administrator validate that once a policy is updated and saved it has been enabled on a
specific detection server?
A. check the status of the policy on the policy list page
B. check to see whether the policy was loaded under System > Servers > Alerts
C. check the policy and validate the date and time it was last updated
D. check to see whether the policy was loaded under System > Servers > Events
Answer: D
Symantec braindump 250-511 250-511 test 250-511 test questions
NO.9 Where should the Network Discover detection server be placed in a corporate network architecture?
A. inside the DMZ
B. on the same virtual LAN as the proxy server
C. inside the corporate network
D. on the same switch as the Oracle database server
Answer: C
Symantec 250-511 250-511 250-511 original questions
NO.10 After installing several new DLP Agents, the Data Loss Prevention administrator discovers that none of
the endpoint agents are appearing on the Agent Overview page. After refreshing the page several times,
and determining that the equipment is powered on and connected to the network, the Agent Overview
page still fails to display the new agents. What is a possible cause for this issue?
A. The DLP Agents need to be added manually through the Symantec Management Platform.
B. The DLP Agents were installed with the incorrect Endpoint server IP address.
C. The assigned Endpoint server needs to be recycled in order to detect the new DLP Agents.
D. The Endpoint Location is set to "Manually" instead of "Automatically" in the Enforce user interface.
Answer: B
Symantec questions 250-511 demo 250-511 braindump 250-511 exam dumps
NO.11 A Data Loss Prevention administrator notices that several errors occurred during a Network Discover
scan. Which report can the administrator use to determine exactly which errors occurred and when?
A. Discover Incident report sorted by target name and scan
B. Full Activity report for that particular scan
C. Server Event report from Server Overview
D. Full Statistics report for that particular scan
Answer: B
Symantec 250-511 original questions 250-511
NO.12 Which two policy management actions can result in a reduced number of incidents for a given traffic
flow? (Select two.)
A. adding additional component matching to the rule
B. adding data owner exceptions
C. deploying to additional detection servers
D. increasing condition match count
E. adding additional severities
Answer: B,D
Symantec dumps 250-511 250-511 250-511 test
NO.13 Which two remediation actions are available for Network Protect? (Select two.)
A. Copy
B. Move
C. Block
D. Rename
E. Quarantine
Answer: A,E
Symantec 250-511 exam prep 250-511 250-511 certification training 250-511
NO.14 To manually troubleshoot DLP Agent issues, the database and log viewer tools must be executed in
which location?
A. in the same location as the dcs.ead file location
B. in the same location as the cg.ead file location
C. in the same location as the ks.ead file location
D. in the same location as the is.ead file location
Answer: C
Symantec braindump 250-511 250-511 demo 250-511 certification 250-511
NO.15 A user is unable to log in as sysadmin. The Data Loss Prevention system is configured to use Active
Directory authentication. The user is a member of two roles, sysadmin and remediator. How should the
user log in to the user interface in the sysadmin role?
A. sysadmin\username@domain
B. sysadmin\username
C. domain\username
D. sysadmin\username\domain
Answer: B
Symantec test questions 250-511 250-511 exam prep 250-511 250-511 250-511 certification
NO.16 Which DLP Agent task is unique to the Symantec Management Platform and is unavailable through
the Enforce console?
A. Change Endpoint server
B. Restart agent
C. Pull agent logs
D. Set log level
Answer: D
Symantec 250-511 questions 250-511 250-511 250-511
NO.17 What are two benefits of the Symantec Data Loss Prevention 11 security architecture? (Select two.)
A. Communication is initiated by the detection servers inside the firewall.
B. SSL communication is used for user access to the Enforce Platform.
C. Endpoint Agent to Endpoint Server communication uses the Triple Data Encryption Standard (Triple
DES).
D. Confidential information captured by system components is stored using Advanced Encryption
Standards (AES) symmetric keys.
E. All indexed data uploaded into the Enforce Platform is protected with a two-way hash.
Answer: B,D
Symantec 250-511 250-511 250-511 original questions
NO.18 The database is full and the Incident Persister is unable to process incidents. Which two file types
could be present in Vontu/protect/incidents? (Select two.)
A. .idx
B. .edc
C. .idc
D. .inc
E. .bad
Answer: C,E
Symantec certification training 250-511 original questions 250-511 certification training 250-511 250-511
NO.19 An administrator is running a Discover Scanner target scan and the scanner is unable to communicate
back to the Discover Server. Where will the files be stored?
A. Discover Server incoming folder
B. scanner's outgoing folder
C. scanner's incoming folder
D. Enforce incident persister
Answer: B
Symantec 250-511 certification 250-511 250-511 250-511
NO.20 Which two functions of the communications architecture ensure that the system will automatically
recover if a network connectivity failure occurs between the detection servers and the Enforce Server?
(Select two.)
A. Oracle database backup
B. detection server autonomous monitoring
C. Enforce Server offline alert notification
D. detection server incident queuing
E. detection server alert archiving
Answer: B,D
Symantec 250-511 250-511 certification training 250-511 250-511
ITCertKing offer the latest 00M-503 exam material and high-quality NS0-156 pdf questions & answers. Our JN0-692 VCE testing engine and HIO-201 study guide can help you pass the real exam. High-quality HP0-Y46 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.
Article Link: http://www.itcertking.com/250-511_exam.html
没有评论:
发表评论