Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 151:

  What needs to be configured in order to collect common fields during a asset import using the default data collector?

  A. ESM data collector

  B. CSV data collector

  C. Automatic Entitlements Import job

  D. a policy with associated assets

  Correct Answer: B

• Question 152:

  What is a feature of keyword proximity matching?

  A. It will match on whole keywords only.

  B. It has a maximum distance between keywords of 99.

  C. It only matches on message body.

  D. It evaluates each keyword pair independently.

  Correct Answer: D

• Question 153:

  Where are roles and permissions stored?

  A. SQL

  B. Credential database

  C. ADAM

  D. Active Directory

  Correct Answer: C

• Question 154:

  What must a policy manager do when working with Exact Data Matching (EDM) indexes?

  A. Re-index large data sources on a daily or weekly basis

  B. Index the original data source on the detection server

  C. Deploy the index only to specific detection servers

  D. Create a new data profile if data source schema changes

  Correct Answer: D

• Question 155:

  Which two functions does Data Owner Exception provide? (Select two.)

  A. Allows data owners to send or receive their own data

  B. Prevents confidential data from being sent to the wrong recipient

  C. Allows individuals to send confidential data about a family member

  D. Allows individuals to send confidential data to any recipient

  E. Prevents individuals from sending confidential data to a group of recipients in the recipient list

  Correct Answer: AB

• Question 156:

  Which two options can incident responders select when deleting incidents? (Select two.)

  A. Delete the incident completely

  B. Delete the original message and retain the incident

  C. Delete the incident and retain the violating attachments or files

  D. Delete the incident and export incident details to .csv file

  E. Delete all attachments or files and log the incident

  Correct Answer: AB

• Question 157:

  A Data Collection job fails for a Windows machine in Symantec Control Compliance Suite 9.0 (CCS 9.0). All components appear to have been correctly installed and configured in the console.

  What is the recommended step to take outside of the CCS 9.0 console to troubleshoot the issue?

  A. Reinstall the MQE

  B. Run a bv-Control query

  C. Delete and recreate the Credentials database

  D. Verify the Enterprise Configuration Service

  Correct Answer: B

• Question 158:

  Which three bv-Control for Windows services may be checked when troubleshooting agentless data collection? (Select three.)

  A. bvProcessManager

  B. Data Processing Service

  C. Directory Support Service

  D. BindView Query Engine

  E. Enterprise Configuration Service

  Correct Answer: ADE

• Question 159:

  What is the maximum number of port lets that can be used in a dashboard?

  A. 4

  B. 6

  C. 8

  D. 10

  Correct Answer: B

• Question 160:

  Which report helps a compliance officer understand how the company is complying with its data security policies over time?

  A. Policy Trend report, summarized by policy, then quarter

  B. Policy Trend report, summarized by policy, then severity

  C. Policy report, filtered on quarter, and summarized by policy

  D. Policy report, filtered on date, and summarized by policy

  Correct Answer: A