Free Symantec 250-587 Practice Test & Real Exam Questions

Exam Code/Number: 250-587
Exam Name/Title: Symantec Data Loss Prevention 16.x Administration Technical Specialist
Certification Provider: Symantec
Corresponding Certification: Symantec Certified Specialist

Exam Questions: 110
Updated On: Aug 16, 2026

Question #19

When Symantec DLP is integrated with Microsoft Purview Information Protection (MPIP, also previously known as MIP), to which content types can the Mac DLP Agent apply MPIP labels (classification tags)?

A. Microsoft Word, Excel, and PowerPoint files; and Microsoft Outlook emails

B. Microsoft Word, Excel, and PowerPoint files; Microsoft Outlook emails; and Adobe PDF files

C. Microsoft Word, Excel, and PowerPoint files; and Adobe PDF files

D. Microsoft Word, Excel, and PowerPoint files

Discussion 0

Correct Answer: D Vote an answer

Question #20

Which two factors are common sources of data leakage where the main actor is well-meaning insider?
(Choose two.)

A. A disgruntled employee for a job with a competitor

B. Merger and Acquisition activities

C. Broken business processes

D. Lack of training and awareness

E. An absence of a trained incident response team

Discussion 0

Correct Answer: A,D Vote an answer

Question #21

Which product is able to replace a confidential document residing on a file share with a marker file explaining why the document was removed?

A. Network Discover

B. Cloud Service for Email

C. Endpoint Prevent

D. Network Protect

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #22

Refer to the exhibit. Which type of Endpoint response rule is shown?

A. Endpoint Prevent: User Cancel

B. Endpoint Prevent: User Notification

C. Endpoint Prevent: Notify

D. Endpoint Prevent: Block

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #23

What detection technology supports partial row matching?

A. Exact data Matching (EDM)

B. described Content Matching (EDM)

C. Indexed Document Matching (IDM)

D. Vector Machine Learning (VML)

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #24

Which detection method depends on "training sets"?

A. Index Document Matching (IDM)

B. Form Recognition

C. Vector Machine Learning (VML)

D. Exact Data Matching (IDM)

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #25

What is required on the Enforce server to communicate with the Symantec DLP database?

A. Symbolic links to .dbf files

B. CryptoMasterKey.properties file

C. Port 8082 should be opened

D. SQL*plus Client

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #26

The Symantec Data Loss risk reduction approach has six stages.
Drag and drop the six correct risk reduction stages in the proper order of Occurrence column.

Discussion 0

Correct Answer:

Explanation:

References:

Question #27

A DLP administrator created a new agent configuration for an Endpoint server. However, the endpoint agents fail to receive the new configuration.
What is one possible reason that the agent fails to receive the new configuration?

A. The new agent configuration was copied and modified from the default agent configuration.

B. The Endpoint server needs to be recycled so that the new agent configuration can take effect.

C. The default agent configuration must be disabled before the new configuration can take effect.

D. The new agent configuration was saved but not applied to any endpoint groups.

Discussion 0

Correct Answer: C Vote an answer

Download Free Symantec 250-587 Demo

Simply submit your e-mail address below to get started with our free demo of your Symantec 250-587 exam.