Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 201:

  In the Symantec Control Compliance Suite 9.0 console, where is the status of Evaluation and Data Collection jobs displayed?

  A. Home

  B. Manage

  C. Monitor

  D. Reporting

  Correct Answer: C

• Question 202:

  In which two places in the user interface are Smart Response rules invoked? (Select two.)

  A. Policy page

  B. Incident List reports

  C. Incident Snapshot reports

  D. Incident Summary reports

  E. Response Rules page

  Correct Answer: BC

• Question 203:

  A Symantec Control Compliance Suite 9.0 (CCS 9.0) administrator has modified a user's role assignment to allow access to additional tasks. However, the user is unable to see these tasks.

  What must the user do to see these additional tasks?

  A. quit and then restart the CCS console

  B. synchronize the user database

  C. hit the refresh icon

  D. choose Advanced Tasks from the Task menu

  Correct Answer: A

• Question 204:

  Which three are components of the Symantec Control Compliance Suite 9.0? (Select three.)

  A. web portal

  B. Evidence database

  C. ESM database

  D. Cognos

  E. application server

  Correct Answer: ABE

• Question 205:

  Which user action can be performed on a read-only policy in the Symantec Control Compliance Suite 9.0 web portal?

  A. Request Clarification

  B. Request Exception

  C. Accept

  D. Decline

  Correct Answer: A

• Question 206:

  A policy template called Customer Credit Card Numbers is being imported into the system.

  What is the default result for the import of this policy template?

  A. The policy template will be listed under US Regulatory Enforcement Templates and be available.

  B. The policy template will be enabled by default.

  C. The policy template will be listed under Imported Templates.

  D. The policy template will be available after restarting the VontuManager service.

  Correct Answer: C

• Question 207:

  A company needs to collect data from their AS/400 application servers.

  Which data collection component will they need to deploy?

  A. bv-Control for AS/400

  B. Symantec Enterprise Security Manager

  C. Symantec RMS

  D. bv-Control for UNIX

  Correct Answer: B

• Question 208:

  A company needs to protect all Mergers and Acquisitions Agreements from leaving the organization. However, there is standard text that is included in all company literature that they would like to exclude.

  What should be done to make sure that this standard text is excluded from detection?

  A. create a whitelisted.txt file after creating the Exact Data Matching (EDM) profile

  B. create a whitelisted.txt file before creating the Exact Data Matching (EDM) profile

  C. create a whitelisted.txt file after creating the Indexed Document Matching (IDM) profile

  D. create a whitelisted.txt file before creating the Indexed Document Matching (IDM) profile

  Correct Answer: D

• Question 209:

  A company has created an Exact Data Matching profile and referenced it in a policy to protect customer credit card information. New customers are added daily, but the profile is updated weekly.

  Until the profile can be updated, which rule should be added to protect new credit card numbers?

  A. A compound rule that also matches on a data identifier

  B. A detection rule that matches on sender/user

  C. A separate detection rule that uses a data identifier

  D. A detection rule that matches on regular expressions

  Correct Answer: C

• Question 210:

  Which two job types invoke the Data Processing Service data collector? (Select two.)

  A. Data Collection job

  B. Asset Import job

  C. Evaluation job

  D. Evidence Collection job

  E. Reporting job

  Correct Answer: AB