Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 41:

  Which product can replace a confidential document residing on a share with a marker file explaining why the document was removed?

  A. Network Discover

  B. Network Protect

  C. Mobile Prevent

  D. Endpoint Discover

  Correct Answer: B

• Question 42:

  What causes the majority of data loss prevention violations?

  A. hackers exploit vulnerabilities and exfiltrate confidential data

  B. companies lack security policies to prevent loss of confidential data

  C. employees unintentionally expose confidential data

  D. system backups are performed improperly

  Correct Answer: C

• Question 43:

  How can agentless asset data collection speed be improved on a large network?

  A. Install the console on a faster machine

  B. Tune the SQL database for performance

  C. Set up multiple information server deployments on the network

  D. Install RMS and Symantec Control Compliance Suite 9.0 on the same box

  Correct Answer: C

• Question 44:

  Which two policy management actions can result in a reduced number of incidents for a given traffic flow? (Select two.)

  A. Adding additional component matching to the rule

  B. Adding data owner exceptions

  C. Deploying to additional detection servers

  D. Increasing condition match count E. Adding additional severities

  Correct Answer: BD

• Question 45:

  What is the main difference between data loss prevention and other security technologies?

  A. It is designed to take a content aware approach to security.

  B. It determines the data owner of inbound sensitive information.

  C. It quarantines adware before it is able to extract confidential information.

  D. It is designed to give visibility into where the company's least sensitive data is stored.

  Correct Answer: C

• Question 46:

  You move a set of files from a VxFS file system to another file system. When the files are moved, the extent attributes are not moved along with the files and are lost during the migration. What could be a possible cause for this problem?

  A. The target file system is not a VxFS type file system.

  B. There is a variation in the block size of source and target VxFS file system.

  C. The target VxFS file system does not have enough free space to accommodate the extent attributes.

  D. The target VxFS file system uses mixed block size.

  Correct Answer: A

• Question 47:

  A company has SMTP Prevent deployed with email blocking enabled in their confidential data policy. The finance department reports that emails containing sensitive data sent to external business partners are being blocked. The company maintains a list of the external business partner domains.

  How can a policy be modified so that emails are sent only to authorized recipients?

  A. duplicate the confidential data policy, add a rule based on "Sender Matches Pattern", and add the email addresses of all employees in the finance department, select "All senders must match" for Match Counting

  B. add an exception to the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "All recipients must match" for Match Counting

  C. create a new rule in the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "At least 1 recipient must match" for Match Counting

  D. add an exception to the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "At least 1 recipient must match" for Match Counting

  Correct Answer: B

• Question 48:

  Which three are prerequisites for RMS installation? (Select three.)

  A. Internet Information Server

  B. Microsoft .NET Framework 2.0

  C. Windows Installer 3.1

  D. Microsoft SQL Server 2005 Express

  E. Crystal Report 2008

  Correct Answer: BCD

• Question 49:

  A user has deleted a report template in a user-defined folder.

  What must the user do to use that report template again?

  A. Find the report template in the Application Server Recycle Bin

  B. Recreate the report template from the predefined report template

  C. Recreate the Report Generation job

  D. Select Add in My Reports

  Correct Answer: B

• Question 50:

  Which minimum right is required for a standard user to open the RMS console and use the query- related features?

  A. must be part of the RMS Console Users local group

  B. must have a Symantec Control Compliance Suite 9.0 Administrator role

  C. must be configured as an RMS Console User

  D. must be part of the RMS Admin Users local group

  Correct Answer: C