Free Symantec 250-587 Practice Test & Real Exam Questions

Exam Code/Number: 250-587
Exam Name/Title: Symantec Data Loss Prevention 16.x Administration Technical Specialist
Certification Provider: Symantec
Corresponding Certification: Symantec Certified Specialist

Exam Questions: 110
Updated On: Aug 16, 2026

Question #10

What is Application Detection Configuration?

A. the setting configured within the user interface (UI) that determines whether CloudSOC should send a file to Cloud Detection Service (CDS) for analysis.

B. The Data Loss Prevention (DLP) policy which has been pushed into Cloud Detection Service (CDC) for files in transit to or residing in Cloud apps

C. The Cloud Detection Service (CDS) process that tells Enforce a policy has been violated

D. The terminology describing the Data Loss Prevention (DLP) process within the CloudSOC administration portal

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #11

Which two automated response rules will be active in policies that include Exact Data Matching (EDM) detection rule? (Choose two.)

A. Endpoint Prevent: User Cancel

B. Network Protect: Quarantine File

C. All: Send Email Notification

D. Endpoint Discover: Quarantine File

E. Endpoint Prevent: Block

Discussion 0

Correct Answer: D,E Vote an answer

Question #12

Which two (2) actions are available for a "Network Prevent: Remove HTTP/HTTPS content" response rule when the content is unable to be removed? (Choose two.)

A. Remove the content through FlexResponse

B. Allow the content to be posted

C. Redirect the content to an alternative destination

D. Block the content from being posted

E. Encrypt the content before posting

Discussion 0

Correct Answer: B,D Vote an answer

Question #13

A DLP administrator needs to remove an agent and its associated events from an Endpoint server.
Which Agent Task should the administrator perform to disable the agent's visibility in the Enforce management console?

A. Change Endpoint Server action from the Agent Overview page

B. Delete action from the Agent List page

C. Delete action from the Agent Health dashboard

D. Disable action from Symantec Management Console

Discussion 0

Correct Answer: D Vote an answer

Question #14

Which two (2) detection servers are available as virtual appliances? (Choose two.)

A. Network Discover

B. Network Prevent for Email

C. Network Monitor

D. Optical Character Recognition (OCR)

E. Network Prevent for Web

Discussion 0

Correct Answer: B Vote an answer

Question #15

In the context of Network Discover scanning of Exchange servers, what is the Exchange Autodiscover service?

A. It is a service on the Exchange server that you enable to send files from the Exchange server for detection analysis against your DLP policies.

B. It is a service on the Enforce server that you enable to resolve custom attributes in Network Discover incidents for Exchange servers.

C. It is a service on the Exchange server that you enable to fetch Exchange server and mailbox information from Active Directory.

D. It is a service on the Discover server that you enable to retrieve files from the Exchange server for detection analysis against your DLP policies.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #16

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration.
What is one possible reason that the agent fails to receive the new configuration?

A. The new agent configuration was copied and modified from the default agent configuration.

B. The Endpoint server needs to be recycled so that the new agent configuration can take effect.

C. The new agent configuration was saved but not applied to any endpoint groups.

D. The default agent configuration must be disabled before the new configuration can be assigned.

Discussion 0

Correct Answer: C Vote an answer

Question #17

What are three features that are available for Network Discover File System High-Speed Discover (FS-HSD) scans but are NOT available for Network Discover (regular or legacy) File System scans?

A. Incremental scans, scan scheduling, and incident replication scan status

B. Symantec DLP REST APIs, incremental scans, and scan scheduling

C. Support for SMB v3, Symantec DLP REST APIs, and incremental scans

D. Support for SMB v3, Symantec DLP REST APIs, and Internal Pause-Resume

Discussion 0

Correct Answer: C Vote an answer

Question #18

Which of the following actions can you implement ONLY as a Smart Response rule (and not as an automates response rule)?

A. All: Limit Incident Data Retention

B. Network Protect: SharePoint Release From Quarantine

C. All: Add Note

D. All: Set Attribute

Discussion 0

Correct Answer: C Vote an answer

Download Free Symantec 250-587 Demo

Simply submit your e-mail address below to get started with our free demo of your Symantec 250-587 exam.