Administration of Symantec Data Loss Prevention 15

Here you have the best Symantec 250-438 practice exam questions

  • You have 70 total questions to study from
  • Each page has 5 questions, making a total of 14 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on November 16, 2025
  • This site is not affiliated with or endorsed by Symantec.
Question 1 of 70
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a `copy to USB device` operation?
    Correct Answer: A

Question 2 of 70
A DLP administrator has enabled and successfully tested custom attribute lookups for incident data based on the Active Directory LDAP plugin. The Chief
Information Security Officer (CISO) has attempted to generate a User Risk Summary report, but the report is empty. The DLP administrator confirms the Cisco's role has the `User Reporting` privilege enabled, but User Risk reporting is still not working.
What is the probable reason that the User Risk Summary report is blank?
    Correct Answer: D

Question 3 of 70
How should a DLP administrator exclude a custom endpoint application named `custom_app.exe` from being monitoring by Application File Access Control?
    Correct Answer: B

Question 4 of 70
A software company wants to protect its source code, including new source code created between scheduled indexing runs.
Which detection method should the company use to meet this requirement?
    Correct Answer: C

Question 5 of 70
What are two reasons an administrator should utilize a manual configuration to determine the endpoint location? (Choose two.)
    Correct Answer: B, D