Symantec Symantec Other Certification 250-437 Questions & Answers

• Question 11:

  What should an administrator do with a cloud application that does NOT meet the compliance requirements, but has mitigating controls available?

  A. Sanction

  B. Monitor

  C. Block

  D. Review

  Correct Answer: A

• Question 12:

  What categories should an administrator utilize to classify cloud applications during the cloud applications adoption workflow?

  A. Accept, Reject, Block

  B. Accept, Monitor, Block

  C. Valid, Invalid, In Process

  D. Sanction, Monitor, Block

  Correct Answer: D

  Reference: https://www.symantec.com/content/dam/symantec/docs/solution-briefs/shadow-it-discoverybest-practices-guide-en.pdf

• Question 13:

  What policy should an administrator utilize to prevent users from internally sharing files with a group of high risk users?

  A. Access Monitoring

  B. File transfer

  C. Threatscore based

  D. Data exposure

  Correct Answer: C

• Question 14:

  Which CloudSOC module should an administrator utilize to identify and understand how cloud applications use information?

  A. Audit

  B. Detect

  C. Securlets

  D. Protect

  Correct Answer: A

• Question 15:

  What is the objective of the Data Exposure policy?

  A. To notify an administrator when activities, such as objects being modified, are performed in a cloud application.

  B. To block users from logging into cloud applications if their ThreatScore is higher than a certain level.

  C. To restrict the direct sharing of documents from cloud applications based both on their content and the characteristics of the user.

  D. To notify the administrator, file owner or acting user and/or to prevent users from sharing documents, either publicly, externally, or internally.

  Correct Answer: D

• Question 16:

  An administrator discovers that an employee has been sending confidential documents to a competitor.

  What type of policy should the administrator use to block the transmission of files to that domain?

  A. Access monitoring

  B. Data Exposure

  C. File transfer

  D. Access enforcement

  Correct Answer: B

• Question 17:

  Which action should an administrator take if a cloud application fails to meet security and compliance requirements, but the business need outweighs the risks?

  A. Sanction

  B. Monitor

  C. Block

  D. Substitute

  Correct Answer: B

• Question 18:

  What policy should an administrator utilize to prevent users from downloading files from Box.com when they are outside the corporate IP range?

  A. File transfer

  B. File sharing

  C. Data exposure

  D. Access enforcement

  Correct Answer: A

• Question 19:

  What type of log upload should an administrator use during production?

  A. FTP

  B. Web upload

  C. SCP/SFTP

  D. APIs

  Correct Answer: C

• Question 20:

  What should an administrator utilize to steer traffic from client devices to the CloudSOC gateway?

  A. SpanVA

  B. ProxySG

  C. The Reach agent

  D. SCP/SFTP

  Correct Answer: B