Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 131:

  Symantec recommends that new deployments of Data Loss Prevention replace the default encryption certificates used for securing communication between the Enforce Server and detection servers. What is the correct utility for generating new certificates for this communication?

  A. sslkeytool.exe

  B. certutil.exe

  C. endpointkeytool.exe

  D. kinit.exe

  Correct Answer: A

• Question 132:

  In Symantec Control Compliance Suite 9.0, if an administrator wants to evaluate assets compared to a referenced asset, what is used?

  A. reference evaluation

  B. baseline standard

  C. gold standard

  D. policy mapping

  Correct Answer: C

• Question 133:

  When manually installing the Symantec DLP Agent, how can the Data Loss Prevention administrator hide the agent from registering itself in the Windows control panel?

  A. Add ARPSYSTEMCOMPONENT="1" to the installer batch file

  B. Select the "Hide from Control Panel" checkbox in the installation user interface

  C. Add HIDECONTROLPANEL="YES" to the installer batch file

  D. Select the "ARPSYSTEMCOMPONENT" checkbox in the installation user interface

  Correct Answer: A

• Question 134:

  From which organization are Symantec Control Compliance Suite 9.0 Predefined Standards most commonly derived?

  A. National Institute of Standards and Technology

  B. National Security Agency

  C. Center for Internet Security

  D. International Organization for Standardization

  Correct Answer: C

• Question 135:

  What are two reasons why a company should implement data loss prevention? (Select two.)

  A. To prevent the threat of malware

  B. To demonstrate regulatory compliance

  C. To protect the CISO from liability due to a security breach

  D. To prevent employee malicious activity

  E. To protect brand and reputation

  Correct Answer: BE

• Question 136:

  Which three Enterprise Security Manager policy-run options can be configured in Symantec Control Compliance Suite 9.0? (Select three.)

  A. Collect data from last policy run

  B. Run policy before collecting data

  C. Collect data from last n policy runs

  D. Run policy n days before collecting data

  E. Run policy if data is older than n days

  Correct Answer: ABE

• Question 137:

  Which tool is provided by default to edit a database on an endpoint?

  A. vontu_sqlite3.exe

  B. update_configuration.exe

  C. logdump.exe

  D. wdp.exe

  Correct Answer: A

• Question 138:

  What is a possible solution when a Network Discover server is unable to scan a remote file server?

  A. Mount the IPC$ share on the file server

  B. Verify that the target file server is a Windows 2000 server

  C. Use the fully qualified name (FQDN) of the server

  D. Verify that the file server has .NET services running

  Correct Answer: C

• Question 139:

  Which four bv-Control platforms are supported in Symantec Control Compliance Suite 9.0 Standards? (Select four.)

  A. Oracle

  B. Windows

  C. UNIX

  D. Exchange

  E. SQL

  F. NetWare

  Correct Answer: ABCE

• Question 140:

  A report template has been scheduled.

  Where will the resulting report be located?

  A. My Reports

  B. Predefined Reports

  C. Monitor > Jobs

  D. My Documents folder

  Correct Answer: A