Symantec Symantec Other Certification 250-437 Questions & Answers

• Question 1:

  Which CloudSOC module should an administrator use to identify and determine business risk of cloud applications within an organization?

  A. Investigate

  B. Protect

  C. Audit

  D. Detect

  Correct Answer: D

• Question 2:

  What CloudSOC module should an administrator use to identify and understand how information is used within cloud applications?

  A. Investigate

  B. Securlets

  C. Audit

  D. Detect

  Correct Answer: C

• Question 3:

  What is the objective of the Access Monitoring policy?

  A. To notify an administrator when activities, such as objects being modified, are performed in a cloud application.

  B. To restrict the direct sharing of documents from cloud applications based both on their content and the characteristics of the user.

  C. To prevent users from sharing documents, either publically, externally, or internally.

  D. To restrict the uploading and downloading of documents from the user's computer to the cloud application, based both on the content of the documents and the characteristics of the user.

  Correct Answer: A

• Question 4:

  What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

  A. Content format

  B. Content types

  C. Custom categories

  D. File format

  Correct Answer: A

• Question 5:

  What variable increases when a detector is triggered by a suspicious behavior?

  A. Risk Rating

  B. Business Readiness Rating (BRR)

  C. Incident Index

  D. ThreatScore

  Correct Answer: D

  Reference: https://www.symantec.com/content/dam/symantec/docs/solution-briefs/cloud-access-securitybroker-best-practices-guide-en.pdf

• Question 6:

  Where should an administrator locate the level of exposure in files in the Securlet module?

  A. Exposure level

  B. Exposed files

  C. Exposed content

  D. Exposure summary

  Correct Answer: A

• Question 7:

  What are the four (4) types of detectors?

  A. Threshold based, download/upload based, threats based, and sequence based

  B. Threshold based, behavior based, and sequence based

  C. Threshold based, behavior based, download/upload based, and access control based

  D. Threshold based, behavior based, malware based, and sequence based

  Correct Answer: B

  Reference: https://www.symantec.com/content/dam/symantec/docs/solution-briefs/cloud-access-securitybroker-best-practices-guide-en.pdf (p.13)

• Question 8:

  Which CloudSOC module(s) use cloud application APIs as data sources?

  A. Detect, Protect, Investigate, and Securlets

  B. Audit

  C. Detect, Protect, and Investigate

  D. Investigate and Securlets

  Correct Answer: D

• Question 9:

  What action should an administrator take if a cloud application is non-business critical?

  A. Sanction

  B. Monitor

  C. Block

  D. Substitute

  Correct Answer: C

  Reference: https://www.symantec.com/content/dam/symantec/docs/solution-briefs/shadow-it-discoverybest-practices-guide-en.pdf (p.6)

• Question 10:

  Who causes 80% of data leaks?

  A. Hackers

  B. Careless users

  C. Malicious insiders

  D. System administrators

  Correct Answer: C