Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 21:

  An administrator is attempting to add a new detection server to the Enforce UI. However, the administrator only has the ability to add Network Monitor and Endpoint servers. The option to add a Discover server is missing. What does the administrator need to do to add an additional server type?

  A. log in as Sys Admin/Server Administrator role

  B. update the software license file

  C. restart the Vontu Monitor service

  D. restart Vontu Monitor Controller service

  Correct Answer: B

• Question 22:

  A DLP administrator needs to decide if using Symantec Management Console (SMC) will provide additional functionality over the built-in Agent Actions that can be performed via Agents > Overview > Summary Reports.

  What are two of the Agent Actions that can be performed with SMC that are unable to be used with the built-in Agent Actions? (Select two.)

  A. Set Under Investigation

  B. Get Agent Configuration

  C. Toggle Print Screen

  D. Set Log Level

  E. Gather Endpoint detection server logs

  Correct Answer: BC

• Question 23:

  Ten test agents are being deployed that use an uninstall password required to uninstall the DLP Agent. The agents deploy and install correctly. Upon testing to remove the Agent, the uninstall password fails to work. The deployment team used 'Symantec' for the UninstallPasswordKey. Why does the uninstall fail when using the same password?

  A. uninstall passwords are restricted from containing the word 'Symantec'

  B. the UninstallPwdKeyGenerator must be used to create an UninstallPasswordKey

  C. the PGPsdk.dll file was missing when the key was created

  D. the uninstall agent password needs to match the uninstall password key

  Correct Answer: B

• Question 24:

  When collecting data from assets, what is the primary factor in determining the types of data that will be collected?

  A. scope

  B. standard

  C. baseline

  D. reference asset

  Correct Answer: B

• Question 25:

  What is a prerequisite for viewing exported dashboards?

  A. Cognos

  B. Crystal Reports

  C. Java

  D. Adobe Flash

  Correct Answer: D

• Question 26:

  Which three asset types can be imported using the default Symantec Control Compliance Suite 9.0 data collection import feature? (Select three.)

  A. Windows machines

  B. Windows users

  C. Windows domains

  D. UNIX machines

  E. Exchange mailboxes

  Correct Answer: ACD

• Question 27:

  A scanner fails to return results upon completion of the scan process.

  Which file should be removed to eliminate previous scan issues?

  A. scanner_typeScanner.cfg

  B. Clean.exe

  C. ScannerControllerLogging.properties

  D. logs

  Correct Answer: A

• Question 28:

  Which two tasks are performed in the Symantec Management Platform? (Select two.)

  A. Change Monitor operational log levels

  B. Change Endpoint Agent log levels

  C. Restart Agents

  D. Gather Enforce logs

  E. Gather Monitor logs

  Correct Answer: BC

• Question 29:

  A DLP Agent is connected to the corporate network through VPN. The administrator sees a Warning icon associated with the agent on the Agent Overview page of the Enforce user interface. The administrator determines the warning is related to a failure to update Active Directory group membership.

  What should the administrator do?

  A. Reinstall the DLP Agent

  B. Restart the DLP Agent

  C. Restart the Endpoint server services

  D. Refresh the Active Directory services

  Correct Answer: B

• Question 30:

  Which two should be used to collect log information from Enforce servers? (Select two.)

  A. Enable the VontuSNMP service and set the community strings accordingly

  B. Use the Log Collection and Configuration tool

  C. Navigate manually to the log directory of the Enforce server installation

  D. Access the Enforce Log Viewer page at https:///logs?view=true

  E. Use dbgmonitor from sysinternals to connect to the debug output of the service

  Correct Answer: BC