Symantec Symantec Certified Security program ST0-237 Questions & Answers

• Question 81:

  What are two available options when accessing the Configure Server page of a Network Monitor server to configure protocol filters? (Select two.)

  A. HTTPS

  B. FTP

  C. SMTP

  D. ICMP

  E. UDP

  Correct Answer: BC

• Question 82:

  Which situation can be monitored by both Network Monitor and Endpoint Prevent?

  A. An employee uses a Chrome 2 browser to post confidential data to a newsgroup using http.

  B. An employee uses Skype to send an instant message to a friend at a competitor site.

  C. An employee uses AIM to send an instant message while off the corporate network.

  D. An employee uses Internet Explorer 7 to send confidential data from a Gmail account using https.

  Correct Answer: A

• Question 83:

  Which object applies to an entitlement exception?

  A. section

  B. standard

  C. control point

  D. policy

  Correct Answer: C

• Question 84:

  Which application or destination is selected for endpoint monitoring by default?

  A. email

  B. removable storage

  C. instant messaging

  D. local drive

  Correct Answer: B

• Question 85:

  An administrator is applying a newly created agent configuration to a server. Upon inspection, however, none of the new configuration settings are displayed.

  What is a possible cause of this issue?

  A. The administration access rights restricts access to apply new configurations.

  B. The server that the new agent configuration was applied to needs to be recycled.

  C. The new agent configuration was saved without applying it to the Endpoint server.

  D. The new agent configuration was copied and modified from the default agent configuration.

  Correct Answer: C

• Question 86:

  An information security officer has detected an unauthorized tool on desktops being used to transmit data with encrypted communications.

  Which Data Loss Prevention feature can prevent this tool from accessing confidential data?

  A. Removable storage monitoring

  B. Network protocol monitoring

  C. Application path filtering

  D. Application monitoring

  Correct Answer: D

• Question 87:

  Which two recommendations should an organization follow when deploying Endpoint Prevent? (Select two.)

  A. Test the agent on a variety of end-user images.

  B. Initially enable monitoring of the local file system.

  C. Enable monitoring of many destinations and protocols simultaneously.

  D. Configure, test, and tune filters.

  E. Configure blocking as soon as the agents are deployed.

  Correct Answer: AD

• Question 88:

  A company needs to scan all of its file shares on a weekly basis to make sure sensitive data is being stored correctly. The total volume of data on the file servers is greater than 1 TB.

  Which approach will allow the company to quickly scan all of this data on a weekly basis?

  A. run an initial complete scan of all the file shares, then modify the scan target to add date filters and exclude any files created or modified before the initial scan was run

  B. run an initial complete scan of all the file shares, then modify the scan target to an incremental scan type

  C. create a separate scan target for each file share and exclude files accessed before the start of each scan

  D. run an initial complete scan of all file shares, create a summary report of all incidents created by the scan, then run weekly scans and compare incidents from weekly scans to incidents from the complete scan

  Correct Answer: B

• Question 89:

  In the context of IT compliance, what are standards?

  A. a set of generally accepted best practices

  B. a protector against a specific risk or threat

  C. statements of goals and objectives

  D. a collection of methods to evaluate compliance efforts

  Correct Answer: A

• Question 90:

  To run a bv-Control query targeting Microsoft SQL Server 2005, which Microsoft component is required on the information server?

  A. SQL Agent

  B. Reporting Services

  C. Integration Services

  D. Distributed Management Objects

  Correct Answer: D