Page 1 of 1

How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detect

Posted: Sat Aug 06, 2022 7:10 am
by answerhappygod
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a ג€copy to USB deviceג€ operation?

A. Add a ג€Limit Incident Data Retentionג€ response rule with ג€Retain Original Messageג€ option selected.
B. Modify the agent config.db to include the file
C. Modify the ג€Endpoint_Retain_Files.intג€ setting in the Endpoint server configuration
D. Modify the agent configuration and select the option ג€Retain Original Filesג€