Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 251:

  An administrator is attempting to check the status of the services for a detection server in the UI. The only option showing under System > Servers > Overview > Server Detail is 'Status'. What is a possible cause for the server details to show 'Status' only?

  A. the services are failing to run

  B. the user is logged in with a limited role

  C. Advanced Process Control is unchecked

  D. Symantec Data Loss Prevention Standard Edition is installed

  Correct Answer: C

• Question 252:

  You execute the qio_convertdbfiles command to convert the database files to use Quick I/O. The command results with an error that the database files are not on a VxFS file system. You need to convert the database files to use Quick I/O.

  What should you do?

  A. Run the qio_getdbfiles command to get the database files on the VxFS file system.

  B. Remove the files from the mkgio.dat file.

  C. Predefine the DB2 environment variable $DB2DATABASE.

  D. Set the database type to DB2.

  Correct Answer: B

• Question 253:

  The administrator determines that \SymantecDLP\Protect\Incidents folder on Enforce contains .BAD files dated today while other .IDC files are flowing in and out of the \Incidents directory. Only .IDC files larger than 1MB are turning to .BAD.

  What could be causing only incident data smaller than 1MB to persist while incidents that are larger than 1MB change to .BAD files?

  A. Enforce hard drive is out of free disk space

  B. detection server has excessive filereader restarts

  C. tablespace is almost full

  D. corrupted policy was deployed

  Correct Answer: C

• Question 254:

  You are accessing the public region of a drive. You get an error message stating that the disk has failed. What could be the possible reason for this message?

  A. VxVM can access the private region but there are uncorrectable I/O failures on the public region of the drive.

  B. VxVM cannot access the private region or the public region of the drive.

  C. VxVM can access the public region of the drive but there are uncorrectable I/O failures on the private region of the drive.

  D. VxVM can access the public and the private region of the drive but the plex on the drive is disabled.

  Correct Answer: C

• Question 255:

  What is the importance of using a CPU in Oracle within the DLP technology?

  A. Central Processing Unit - ensures database has enough processing power

  B. Command Processor Unit - lays out the commands to process for the database

  C. Critical Patch Update - ensures Oracle is securely patched

  D. Communications Processing Unit - sends alerts to administrator

  Correct Answer: C

• Question 256:

  Which command is used to save queries/commands written to the database when one of the following DMLs is used: Update, Insert, or Delete?

  A. commit

  B. finalize

  C. :wq

  D. exit

  Correct Answer: A

• Question 257:

  Refer to the exhibit.

  

  Symantec Data Loss Prevention's four phases of risk reduction model provides a blueprint for identifying and remediating key risk areas without disrupting legitimate business activity. According to best practices, which option should be enabled during the baseline phase of policy risk reduction?

  A. Change automated email responses

  B. EDM/IDM detection

  C. Use secure storage

  D. Enable auto-encryption

  Correct Answer: B

• Question 258:

  An incident responder can see basic incident data, but is unable to view specific details of the incident. What could be wrong with the configuration in the incident responder's role?

  A. View option is selected and all display attributes are deselected.

  B. Incident Access tab conditions are specified.

  C. Available Smart Response rules are deselected.

  D. Server administration rights are deselected.

  Correct Answer: A

• Question 259:

  You have executed the vxdg -g diskgroup adddisk disk_name= command. Which switch needs to be added to force VxVM to take the disk media name of the failed disk and assign it to the new replacement disk?

  A. -force

  B. -k

  C. -f

  D. -assign

  Correct Answer: C

• Question 260:

  Which endpoint database file should be used to tune and change debugging levels?

  A. cg.ead

  B. ps.ead

  C. am.ead

  D. ks.ead

  Correct Answer: A