Symantec Data Loss Prevention 16.x Administration Training – 250-587 Exam Preparation

Symantec Data Loss Prevention (DLP) finds sensitive data, monitors how it moves and stops leaks across the network, endpoints, storage and the cloud. This five-day course follows Broadcom's published 16.x outline and mixes short lectures with many labs: the Enforce server, detection servers, the DLP agent, policy authoring, incident response and reporting. It also prepares you for Broadcom exam 250-587, and it introduces integration with Symantec CloudSOC CASB and Microsoft Purview.

The essentials

• Publisher : Broadcom (Symantec)
• Certification : Symantec Data Loss Prevention 16.x Administration Technical Specialist
• Exam code : 250-587
• Duration : 5 days
• Level : Intermediate
• Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
• Languages : French or English
• Exam facts : Exam 250-587 · proctored · format and length: contact us
• Exam voucher: included or optional depending on the package — contact us.
• See all exam vouchers

Objectives

• Understand the data loss landscape and typical use cases
• Describe the architecture and components of Symantec DLP
• Describe confidential data using the right detection techniques (EDM, IDM, VML, OCR and more)
• Locate sensitive data on premises, in the cloud and on endpoints
• Build response rules for data in motion, in use and at rest
• Remediate incidents and track risk reduction
• Extend DLP through Symantec and Microsoft Purview integrations

Program

1. The data loss prevention landscape
   • Risk management and use cases
2. Symantec DLP overview
   • Suite components and architecture
3. Identifying and describing confidential data
   • Content matching and risk-based detection
   • EDM/EMDI, IDM, VML, image recognition, OCR, policy templates
4. Locating stored confidential data
   • Corporate repositories, cloud locations and endpoints
5. Understanding how data is used
   • Network, cloud and endpoint monitoring
6. Educating users
   • Policy violation notifications
7. Preventing unauthorized exposure
   • Response rules; protecting data in motion, in use and at rest
8. Remediation and risk tracking
   • Incident reporting, risk reduction tools, analytics
9. Integrations
   • Symantec products and Microsoft Purview
10. Course review
    • Architecture and implementation stages

Prerequisites

• Working knowledge of Windows Server operating systems and commands
• Understanding of networking and network security concepts
• Experience writing technical policies and handling incident response

Target audience

• Administrators who create and maintain DLP policies
• Teams handling data loss incidents
• IT professionals responsible for a Symantec DLP deployment

The exam

Broadcom exam 250-587, “Symantec Data Loss Prevention 16.x Administration Technical Specialist”, is a proctored exam whose objectives follow the main course themes, from the DLP landscape to integrations. Broadcom recommends six to nine months of regular hands-on work with the whole suite before you take it. The number of questions, time limit, passing score and languages are not listed in the study guide we reviewed; we confirm them when you register and help you plan a realistic exam date.

Preparation tips

• List your organization's sensitive data types in advance for the workshops
• Redo the policy labs (PII, PCI, source code) after the course
• Use the 250-587 study guide objectives as a checklist

Frequently asked questions (FAQ)

Does the course cover cloud DLP and CASB?

It covers cloud monitoring and introduces integration with Symantec CloudSOC CASB, without being a full CASB course.

How long until I am ready for 250-587?

Broadcom recommends six to nine months of practice. The course lays the foundation; real-world experience does the rest, so plan time on a lab or pilot deployment after the week.

Is the course lab-heavy?

Yes: PII and PCI policies, source code protection, OCR, discovery scans, endpoint blocking and quarantine, among others.

Which formats and languages?

Live online, in person in Casablanca or on-site at your organization, in French or English.

Is Securevalley a Broadcom partner?

No. This is independent training based on the outline Broadcom publishes, without Broadcom-branded courseware or official completion certificates.

Related trainings

• Symantec Endpoint Security (SES) Administration
• Symantec Secure Web Gateway (ProxySG / ASG) Administration
• Symantec Endpoint Detection and Response (EDR) Administration

Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.

Securevalley is not a training partner of Broadcom. Broadcom, Symantec and related product names are trademarks of Broadcom.

Related trainings

• Forcepoint DLP Administrator Training – Certification Preparation
• Forcepoint DLP System Engineer Training – Certification Preparation
• Symantec EDR 4.x Planning, Implementation and Administration Training (R1.1)
• Symantec Email Security.cloud Administration R2 Training – 250-579 Exam Preparation
• Symantec Endpoint Security Complete Administration R1.4 Training – 250-604 Exam Preparation
• Symantec Web Protection – Edge SWG Administration R2 Training – 250-589 Exam Preparation