Symantec 250-437 Online Practice Questions and Exam Preparation

Symantec 250-437 Online Questions & Answers

• Question 1:

  What module can an administrator use to connect certain cloud applications to CloudSOC via APIs, and have complete visibility into the content being shared in those cloud applications?

  A. Investigate
  B. Detect
  C. Protect
  D. Securlets
  D. Securlets

• Question 2:

  Refer to the exhibit. What does this Access Monitoring policy do?

  

  A. Notify the owner when an email is sent
  B. Send a ticket when a user with a ThreatScore higher than 80 performs an invalid login
  C. Notify the admin when a folder is deleted by a user with a ThreatScore higher than 80
  D. Create a ticket when a user with a ThreatScore higher than 80 sends an email
  D. Create a ticket when a user with a ThreatScore higher than 80 sends an email

• Question 3:

  What should an administrator do with a cloud application that does NOT meet the compliance requirements, but has mitigating controls available?

  A. Sanction
  B. Monitor
  C. Block
  D. Review
  A. Sanction

• Question 4:

  What step should an administrator complete immediately before being able to classify a cloud application using the cloud application adoption workflow?

  A. Discover Shadow IT
  B. Ensure compliance
  C. Analyze usage
  D. Identify risky apps
  A. Discover Shadow IT

• Question 5:

  What action should an administrator take if a cloud application has significant risks, but mitigating controls are available?

  A. Sanction
  B. Monitor
  C. Block
  D. Substitute
  A. Sanction

  ---

  Reference: https://www.symantec.com/content/dam/symantec/docs/solution-briefs/shadow-it-discovery-best-practices-guide-en.pdf

• Question 6:

  Where should an administrator locate the level of exposure in files in the Securlet module?

  A. Exposure level
  B. Exposed files
  C. Exposed content
  D. Exposure summary
  A. Exposure level

• Question 7:

  What is the objective of File Sharing policies?

  A. To restrict the direct sharing of documents from cloud applications based both on their content and the characteristics of the user.
  B. To prevent users from sharing documents, either publicly, externally, or internally.
  C. To notify an administrator when activities, such as objects being modified, are performed in a cloud application.
  D. To restrict the uploading and downloading of documents from the user's computer to the cloud application, based both on the content of the documents, and the characteristics of the user.
  A. To restrict the direct sharing of documents from cloud applications based both on their content and the characteristics of the user.

• Question 8:

  What policy should an administrator utilize to prevent users from internally sharing files with a group of high risk users?

  A. Access Monitoring
  B. File transfer
  C. Threatscore based
  D. Data exposure
  C. Threatscore based

• Question 9:

  Which CloudSOC module(s) use cloud application APIs as data sources?

  A. Detect, Protect, Investigate, and Securlets
  B. Audit
  C. Detect, Protect, and Investigate
  D. Investigate and Securlets
  D. Investigate and Securlets

• Question 10:

  What type of log upload should an administrator use during production?

  A. FTP
  B. Web upload
  C. SCP/SFTP
  D. APIs
  C. SCP/SFTP