Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 141:

  How can an administrator validate that once a policy is updated and saved it has been enabled on a specific detection server?

  A. Check the status of the policy on the policy list page

  B. Check to see whether the policy was loaded under System > Servers > Alerts

  C. Check the policy and validate the date and time it was last updated

  D. Check to see whether the policy was loaded under System > Servers > Events

  Correct Answer: D

• Question 142:

  The business data owner is unavailable.

  Who can approve the entitlements in his absence?

  A. Alternate approver

  B. Alternate data owner

  C. Any user with the approver role

  D. IT administrator

  Correct Answer: A

• Question 143:

  A Data Processing Service in a Load Balancer role distributes jobs to Data Processing Services in which two roles? (Select two.)

  A. Evaluator

  B. BladeRunner

  C. Collector

  D. Load Balancer

  E. Scheduler

  Correct Answer: AC

• Question 144:

  Which three can be used to install a bv-Control for Windows MQE? (Select three.)

  A. bv-Config Utility

  B. bv-Control for Windows Configuration Wizard

  C. configuration settings

  D. RMS configuration

  E. setup.exe

  Correct Answer: ABE

• Question 145:

  Refer to the exhibit.

  

  Symantec Data Loss Prevention's four phases of risk reduction model provides a blueprint for identifying and remediating key risk areas without disrupting legitimate business activity.

  Which two actions are involved with the remediation phase of risk reduction? (Select two.)

  A. employee and business unit communication

  B. sender auto notification

  C. blocking and notifying response rules

  D. fixing broken business processes

  E. enabling Exact Data Matching (EDM)/Indexed Document Matching (IDM)

  Correct Answer: AD

• Question 146:

  The following steps have been taken: Which job will be executed?

  A. Entitlements Import job

  B. Asset Import job

  C. Automatic Entitlements Import job

  D. Evaluation job

  Correct Answer: B

• Question 147:

  An administrator has received the system event: "Tablespace is almost full". How should the administrator resolve this issue?

  A. Restart the Oracle database services

  B. Create additional data files for the Oracle database

  C. Restart the Vontu services

  D. Purge incidents from the \Vontu\Protect\incidents folder

  Correct Answer: B

• Question 148:

  Within an evaluation result, the status Unknown is primarily defined with which check setting?

  A. missing data items

  B. check expression

  C. precondition

  D. data items filter

  Correct Answer: A

• Question 149:

  A dashboard can be exported to a folder from which two areas? (Select two.)

  A. Home

  B. Monitor > Jobs

  C. Reporting > My Reports

  D. Reporting > My Dashboards

  E. Reporting > Dashboard Templates

  Correct Answer: AD

• Question 150:

  A business unit is generating a large number of high severity incidents on a Network Prevent credit card policy.

  What are two likely causes? (Select two.)

  A. The business unit's employees are storing credit card data insecurely on a local file share.

  B. A business process within the business unit violates corporate security policies.

  C. The business unit's employees are copying credit card data to removable drives.

  D. The business unit's employees may be unaware of correct credit card handling procedures.

  E. The policy is unable to detect corporate security policies with respect to credit cards.

  Correct Answer: BD