Free Practice Questions for Symantec 250-587 Exam

Exchange Autodiscover is an Exchange-side service that provides configuration information about Exchange servers and mailboxes by using Active Directory. During a Network Discover scan of Microsoft Exchange, Symantec DLP relies on this service to identify the Exchange environment and obtain the mailbox information needed to configure and execute the scan target. It is not a file-retrieval engine installed on the Discover server, nor is it an Enforce-side custom-attribute resolver. The actual collection and policy inspection of Exchange content are performed by the DLP discovery components after the Exchange topology and mailbox information have been identified. Therefore, option B correctly identifies both the location of the Autodiscover service and its administrative function within the Exchange discovery workflow.

================

Application Detection Configurations define which CloudSOC application traffic or stored content must be submitted to the DLP Cloud Detection Service. The configuration associates the relevant cloud applications with CloudSOC control mechanisms, including Gatelets for inline traffic control and Securlets for API-based inspection of content stored in cloud applications. DLP policies determine whether the submitted content violates policy, but policies alone do not instruct CloudSOC which application data should be forwarded for analysis. Detector overview settings configure DLP servers rather than cloud-application selection, and Endpoint Agent settings do not control CloudSOC content submission. Therefore, an administrator must create one or more Application Detection Configurations containing the appropriate Gatelet and Securlet settings. This makes option D the correct answer.

================

A Mail Transfer Agent is an email-routing component responsible for transferring SMTP messages between mail systems. In a Symantec DLP Network Prevent for Email deployment, the MTA routes email to or through the prevention detector so that message headers, body content, and attachments can be inspected against DLP policies before delivery proceeds. Depending on the policy result and configured response rule, the email can be allowed, modified, redirected, quarantined, or blocked. An MTA is not responsible for browser security, general packet monitoring, or firewall administration. Although the option uses simplified wording, the MTA enables the capture and inspection workflow by directing SMTP traffic to the DLP detector. Therefore, option C most accurately represents the role of an MTA in Network Prevent for Email.

================

Optical Character Recognition is required when sensitive information exists as pixels rather than directly extractable text. A scanned document or image-based PDF may visibly contain names, account numbers, identification numbers, or other protected information, but normal detection rules cannot evaluate those characters until they have been converted into machine-readable text. OCR performs that conversion and passes the extracted text to the DLP detection process, where keywords, regular expressions, Data Identifiers, or other policy rules can inspect it. Keyword and regular-expression matching may operate after OCR processing, but neither technique performs the image-to-text conversion. Exact Data Matching also requires readable and normalized values before comparing content with an index. Therefore, Optical Character Recognition, option B, is the correct detection method.

================