How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a "cope to USB device" operation?
A) Add a "Limit Incident Data Retention" response rule with "retain Original Message" option selected.
B) Modify the agent config.db to include the file
C) Modify the "Endpoint_Retain_Files.int" setting in the Endpoint server configuration
D) Modify the agent configuration and select the option "retain Original Files"
Correct Answer:
Verified
Q44: What detection technology supports partial contents matching?
A)
Q45: Which two detection technology options ONLY run
Q46: A DLP administrator needs to remove an
Q47: A DLP administrator has enabled and successfully
Q48: What is required on the Enforce server
Q50: Where should an administrator set the debug
Q51: Which two DLP products support the new
Q52: What detection technology supports partial row matching?
A)
Q53: A company needs to implement Data Owner
Q54: Which server target uses the "Automated Incident
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents