Question 1

What are the four (4) types of detectors?

Accepted Answer

A)  Threshold based, download/upload based, threats based, and sequence based 
B)  Threshold based, behavior based, and sequence based 
C)  Threshold based, behavior based, download/upload based, and access control based 
D)  Threshold based, behavior based, malware based, and sequence based 
A)  Threshold based, download/upload based, threats based, and sequence based 
B)  Threshold based, behavior based, and sequence based 
C)  Threshold based, behavior based, download/upload based, and access control based 
D)  Threshold based, behavior based, malware based, and sequence based

Question 2

Refer to the exhibit. What action should an administrator take if this incident was found in the Investigate module?

Accepted Answer

A)  Create an access enforcement policy and block access to the file 
B)  Create a file transfer policy and block the download of the file 
C)  Create a file sharing policy and block the sharing of the file 
D)  Create an access monitoring policy and monitor the usage of the file 
A)  Create an access enforcement policy and block access to the file 
B)  Create a file transfer policy and block the download of the file 
C)  Create a file sharing policy and block the sharing of the file 
D)  Create an access monitoring policy and monitor the usage of the file

Question 3

What type of policy should an administrator use to prevent a user that is behaving in anomalous ways from sharing public links while you monitor them?

Accepted Answer

A)  Access monitoring 
B)  File transfer 
C)  Data exposure 
D)  Access enforcement 
A)  Access monitoring 
B)  File transfer 
C)  Data exposure 
D)  Access enforcement

Question 4

What Rule Type in ContentIQ profiles do business, computing, encryption, engineering, health, and legal belong to?

Accepted Answer

A)  Content types 
B)  Custom dictionaries 
C)  Keywords 
D)  Risk types 
A)  Content types 
B)  Custom dictionaries 
C)  Keywords 
D)  Risk types

Question 5

Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

Accepted Answer

A)  Audit 
B)  Detect and Protect 
C)  Detect, Protect, and Investigate 
D)  Detect, Protect, Investigate, and Securlets 
A)  Audit 
B)  Detect and Protect 
C)  Detect, Protect, and Investigate 
D)  Detect, Protect, Investigate, and Securlets

Question 6

What module should an administrator use to create policies with one click, and send them to the Protect Module?

Accepted Answer

A)  Detect 
B)  Investigate 
C)  Audit 
D)  Securlet 
A)  Detect 
B)  Investigate 
C)  Audit 
D)  Securlet

Question 7

What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

Accepted Answer

A)  Content format 
B)  Content types 
C)  Custom categories 
D)  File format 
A)  Content format 
B)  Content types 
C)  Custom categories 
D)  File format

Question 8

Who causes 80% of data leaks?

Accepted Answer

A)  Hackers 
B)  Careless users 
C)  Malicious insiders 
D)  System administrators 
A)  Hackers 
B)  Careless users 
C)  Malicious insiders 
D)  System administrators

Question 9

What categories should an administrator utilize to classify cloud applications during the cloud applications adoption workflow?

Accepted Answer

A)  Accept, Reject, Block 
B)  Accept, Monitor, Block 
C)  Valid, Invalid, In Process 
D)  Sanction, Monitor, Block 
A)  Accept, Reject, Block 
B)  Accept, Monitor, Block 
C)  Valid, Invalid, In Process 
D)  Sanction, Monitor, Block

Question 10

Refer to the exhibit. Which CloudSOC module(s) use firewalls and proxies as data sources?

Accepted Answer

A)  Detect, Protect, and Investigate 
B)  Detect, Protect, Investigate, and Securlets 
C)  Audit and Investigate 
D)  Audit 
A)  Detect, Protect, and Investigate 
B)  Detect, Protect, Investigate, and Securlets 
C)  Audit and Investigate 
D)  Audit

Question 11

What Business Readiness Rating (BRR) category does the subcategory "HTTP Security Headers" belong to?

Accepted Answer

A)  Informational 
B)  Service 
C)  Administrative 
D)  Data 
A)  Informational 
B)  Service 
C)  Administrative 
D)  Data

Question 12

What Business Readiness Rating (BRR) category does the subcategory "Password Quality Rules" belong to?

Accepted Answer

A)  Data 
B)  Compliance 
C)  Business 
D)  Access 
A)  Data 
B)  Compliance 
C)  Business 
D)  Access

Question 13

What modules are used in the use case "Identify and remediate malicious behavior within cloud applications"?

Accepted Answer

A)  Detect, Protect, and Investigate 
B)  Detect and Investigate 
C)  Detect 
D)  Detect and Securlets 
A)  Detect, Protect, and Investigate 
B)  Detect and Investigate 
C)  Detect 
D)  Detect and Securlets

Question 14

What CloudSOC module should an administrator use to identify and understand how information is used within cloud applications?

Accepted Answer

A)  Investigate 
B)  Securlets 
C)  Audit 
D)  Detect 
A)  Investigate 
B)  Securlets 
C)  Audit 
D)  Detect

Question 15

What type of log upload should an administrator use during production?

Accepted Answer

A)  FTP 
B)  Web upload 
C)  SCP/SFTP 
D)  APIs 
A)  FTP 
B)  Web upload 
C)  SCP/SFTP 
D)  APIs

Question 16

Which of the following is not a VPM trigger object?

Accepted Answer

A)  Time 
B)  Source 
C)  Destination 
D)  Service 
E)  Action 
A)  Time 
B)  Source 
C)  Destination 
D)  Service 
E)  Action

Question 17

Which of the following is NOT a component of a proxy service listener?

Accepted Answer

A)  Source IP address 
B)  Port range 
C)  Destination IP address 
D)  Proxy type 
A)  Source IP address 
B)  Port range 
C)  Destination IP address 
D)  Proxy type

Question 18

A primary difference between a proxy server and a firewall is that proxy is not fundamentally what?

Accepted Answer

A)  An edge device 
B)  A man-in-the-middle 
C)  A Layer 3 switch 
D)  A router 
A)  An edge device 
B)  A man-in-the-middle 
C)  A Layer 3 switch 
D)  A router

Question 19

Where should an administrator locate the level of exposure in files in the Securlet module?

Accepted Answer

A)  Exposure level 
B)  Exposed files 
C)  Exposed content 
D)  Exposure summary 
A)  Exposure level 
B)  Exposed files 
C)  Exposed content 
D)  Exposure summary

Question 20

What is one drawback to using apparent data type to detect the file type?

Accepted Answer

A)  Presents a security risk 
B)  Less accurate than HTTP content type detection 
C)  None of these answers 
D)  Most resource-intensive 
A)  Presents a security risk 
B)  Less accurate than HTTP content type detection 
C)  None of these answers 
D)  Most resource-intensive

What are the four (4) types of detectors?

Refer to the exhibit. What action should an administrator take if this incident was found in the Investigate module?

What type of policy should an administrator use to prevent a user that is behaving in anomalous ways from sharing public links while you monitor them?

What Rule Type in ContentIQ profiles do business, computing, encryption, engineering, health, and legal belong to?

Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

What module should an administrator use to create policies with one click, and send them to the Protect Module?

What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

Who causes 80% of data leaks?

What categories should an administrator utilize to classify cloud applications during the cloud applications adoption workflow?

Refer to the exhibit. Which CloudSOC module(s) use firewalls and proxies as data sources?

What Business Readiness Rating (BRR) category does the subcategory "HTTP Security Headers" belong to?

What Business Readiness Rating (BRR) category does the subcategory "Password Quality Rules" belong to?

What modules are used in the use case "Identify and remediate malicious behavior within cloud applications"?

What CloudSOC module should an administrator use to identify and understand how information is used within cloud applications?

What type of log upload should an administrator use during production?

Which of the following is not a VPM trigger object?

Which of the following is NOT a component of a proxy service listener?

A primary difference between a proxy server and a firewall is that proxy is not fundamentally what?

Where should an administrator locate the level of exposure in files in the Securlet module?

What is one drawback to using apparent data type to detect the file type?

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec ProxySG 6.7

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters

Exam 3: Administration of Symantec Data Loss Prevention 12 (Broadcom)

What are the four (4) types of detectors?

Refer to the exhibit. What action should an administrator take if this incident was found in the Investigate module?

What type of policy should an administrator use to prevent a user that is behaving in anomalous ways from sharing public links while you monitor them?

What Rule Type in ContentIQ profiles do business, computing, encryption, engineering, health, and legal belong to?

Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

What module should an administrator use to create policies with one click, and send them to the Protect Module?

What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

Who causes 80% of data leaks?

What categories should an administrator utilize to classify cloud applications during the cloud applications adoption workflow?

Refer to the exhibit. Which CloudSOC module(s) use firewalls and proxies as data sources?

What Business Readiness Rating (BRR) category does the subcategory "HTTP Security Headers" belong to?

What Business Readiness Rating (BRR) category does the subcategory "Password Quality Rules" belong to?

What modules are used in the use case "Identify and remediate malicious behavior within cloud applications"?

What CloudSOC module should an administrator use to identify and understand how information is used within cloud applications?

What type of log upload should an administrator use during production?

Which of the following is not a VPM trigger object?

Which of the following is NOT a component of a proxy service listener?

A primary difference between a proxy server and a firewall is that proxy is not fundamentally what?

Where should an administrator locate the level of exposure in files in the Securlet module?

What is one drawback to using apparent data type to detect the file type?

Administration of Symantec Endpoint Protection 14 (Broadcom)

Administration of Symantec Email Security.cloud (v1)

Administration of Symantec ProxySG 6.7

Symantec Messaging Gateway 10.5 Technical Assessment (Broadcom)

Filters