A DLP administrator needs to inspect HTTP traffic using a Network Monitor, including data pushed up to the web and data pulled down from the web. Which configuration changes should the administrator make under the advanced server settings to include all cases?
A) L7.processGets=false, PacketCapture.DISCARD_HTTP_GET=true, L7.minSizeofGetURL=1000
B) L7.processGets=true, PacketCapture.DISCARD_HTTP_GET=true, L7.minSizeofGetURL=100
C) L7.processGets=false, PacketCapture.DISCARD_HTTP_GET=false, L7.minSizeofGetURL=10
D) L7.processGets=true, PacketCapture.DISCARD_HTTP_GET=false, L7.minSizeofGetURL=10

Question

Quizplus · Accepted Answer

To inspect both data pushed to and pulled from the web, the administrator should enable processing of HTTP GET requests and ensure they are not discarded. Setting `L7.processGets=true` and `PacketCapture.DISCARD_HTTP_GET=false` achieves this. A small `L7.minSizeofGetURL` ensures even small GET requests are captured.

A DLP Administrator Needs to Inspect HTTP Traffic Using a Network