Câu 5: 250-587: Symantec Data Loss Prevention 16.x Administration Technical Specialist

How should a DLP administrator change a policy that it retains the original file when an endpoint incident has detected a “copy to USB device” operation?

1. A. Add a “Limit Incident Data Retention” response rule with “Retain Original Message” option selected
2. B. Modify the agent configuration and select the option “Retain Original Files” — đáp án hiện tại
3. C. Modify the agent config.db to include the file
4. D. Modify the “Endpoint_Retain_Files.int” setting in the Endpoint server configuration