Refer to the exhibit.

What activity should occur during the baseline phase, according to the risk reduction model?

Which product is able to replace a confidential document residing on a file share with a marker file explaining why the document was removed?

Refer to the exhibit. Which type of Endpoint response rule is shown?

A DLP administrator is testing Network Prevent for Web functionality. When the administrator posts a small test file to a cloud storage website, no new incidents are reported.
What should the administrator do to allow incidents to be generated against this file?

How should a DLP administrator exclude a custom endpoint application named "custom_app.exe" from being monitored by Application File Access Control?