Symantec Symantec Certifications 250-437 Questions & Answers

• Question 51:

  What module should an administrator use to identify anomalous user behavior such as large amounts of data being downloaded, too many files being shared, or logins from suspicious locations?

  A. Detect

  B. Protect

  C. Investigate

  D. Audit

  Correct Answer: A

  Reference: http://www.arrowecs.pt/ficheros/ partners/211_ShadowDataReport_1H_2016_Digital_Screen_compressed.pdf

• Question 52:

  What Business Readiness Rating (BRR) category does the subcategory "Password Quality Rules" belong to?

  A. Data

  B. Compliance

  C. Business

  D. Access

  Correct Answer: D

• Question 53:

  How does the Securlet module get data?

  A. Firewall and proxies

  B. CloudSOC gateway

  C. Cloud application APIs D. CloudSOC gateway and cloud application APIs

  Correct Answer: D

• Question 54:

  What policy should an administrator utilize to allow users access to Office 365, but prevent the extraction of files when their ThreatScore is higher than 30?

  A. File transfer

  B. Access enforcement

  C. ThreatScore based

  D. Data exposure

  Correct Answer: C

  Reference: https://support.symantec.com/en_US/article.ALERT2395.html

• Question 55:

  Which type of a policy can perform a user log out from Single Sign On?

  A. Access Monitoring policy

  B. ThreatScore based policy

  C. Access enforcement policy

  D. None of the above

  Correct Answer: D

• Question 56:

  How does the Detect module get data?

  A. Firewalls and proxies

  B. CloudSOC gateway and cloud application APIs

  C. Firewalls and proxies, and CloudSOC gateway

  D. Cloud application APIs

  Correct Answer: C

• Question 57:

  What type of solution should an administrator implement to secure the way users interact with cloud applications?

  A. Intrusion Detection System/Intrusion Protection System (IDS/IPS)

  B. Cloud Access Security Broker (CASB)

  C. Web application firewalls

  D. Proxies

  Correct Answer: B

• Question 58:

  What type of policy should an administrator utilize to prevent the spread of malware through cloud applications?

  A. Access monitoring

  B. File transfer

  C. File sharing

  D. Access enforcement

  Correct Answer: A

• Question 59:

  Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

  

  A. Audit

  B. Detect and Protect

  C. Detect, Protect, and Investigate

  D. Detect, Protect, Investigate, and Securlets

  Correct Answer: B

• Question 60:

  What CloudSOC module should an administrator use to identify and remediate malicious behavior within cloud applications?

  A. Audit

  B. Securlets

  C. Detect

  D. Investigate

  Correct Answer: C