Question 1

Under the “System Overview” in the Enforce management console, the status of a Network Monitor detection server is shown as “Running Selected.” The Network Monitor server’s event logs indicate that the packet capture and filereader processes are crashing. What is a possible cause for the Network Monitor server being in this state?

Options :

A : There is insufficient disk space on the Network Monitor server.

B : The Network Monitor server’s certificate is corrupt or missing.

C : The Network Monitor server’s license file has expired.

D : The Enforce and Network Monitor servers are running different versions of DLP.

Answer: D

Question 2

Which two detection technology options ONLY run on a detection server? (Choose two.)

Options :

A : Form Recognition

B : Indexed Document Matching (IDM)

C : Described Content Matching (DCM)

D : Exact Data Matching (EDM)

E : Vector Machine Learning (VML)

Answer: B,D

Question 3

Which option correctly describes the two-tier installation type for Symantec DLP?

Options :

A : Install the Oracle database on the host, and install the Enforce server and a detection server on a second host

B : Install the Oracle database on a local physical host, and install the Enforce server and detection servers on virtual hosts in the Cloud.

C : Install the Oracle database and a detection server in the same host, and install the Enforce server on a second host.

D : Install the Oracle database and Enforce server on the same host, and install detection servers on separate hosts.

Answer: D

Question 4

Which statement accurately describes where Optical Character Recognition (OCR) components must be installed?

Options :

A : The OCR engine must be installed on detection server other than the Enforce server.

B : The OCR server software must be installed on one or more dedicated (non-detection) Linux servers.

C : The OCR engine must be directly on the Enforce server.

D : The OCR server software must be installed on one or more dedicated (non-detection) Windows servers.

Answer: D

Question 5

Which detection server is available from Symantec as a hardware appliance?

Options :

A : Network Prevent for Email

B : Network Discover

C : Network Monitor

D : Network Prevent for Web

Answer: D