Question 1

What needs to be selected for the Explicit HTTP service to be able to hand off SSL traffic?

Accepted Answer

A)  Port 443 
B)  Enable ADN 
C)  Early Intercept 
D)  Detect Protocol

Question 2

Which action should an administrator take if a cloud application fails to meet security and compliance requirements, but the business need outweighs the risks?

Accepted Answer

A)  Sanction 
B)  Monitor 
C)  Block 
D)  Substitute

Question 3

Which built-in tool would you use to monitor external resources?

Accepted Answer

A)  Sysinfo 
B)  Health checks 
C)  Event log 
D)  SNMP

Question 4

Which CloudSOC module(s) use cloud application APIs as data sources?

Accepted Answer

A)  Detect, Protect, Investigate, and Securlets 
B)  Audit 
C)  Detect, Protect, and Investigate 
D)  Investigate and Securlets

Question 5

What is one of the security challenges generated by the proliferation of cloud applications?

Accepted Answer

A)  Variety of endpoints 
B)  Cross-site scripting 
C)  Malware 
D)  Vulnerabilities

Question 6

What does the authentication mode specify?

Accepted Answer

A)  The time-to-live for credentials 
B)  The protocol used to communicate with the authentication service 
C)  The challenge type and the accepted surrogate 
D)  Whether the credentials will be encrypted

Question 7

Refer to the exhibit. What does this Access Monitoring policy do?

Accepted Answer

A)  Notify the owner when an email is sent 
B)  Send a ticket when a user with a ThreatScore higher than 80 performs an invalid login 
C)  Notify the admin when a folder is deleted by a user with a ThreatScore higher than 80 
D)  Create a ticket when a user with a ThreatScore higher than 80 sends an email

Question 8

What module should an administrator use to identify anomalous user behavior such as large amounts of data being downloaded, too many files being shared, or logins from suspicious locations?

Accepted Answer

A)  Detect 
B)  Protect 
C)  Investigate 
D)  Audit

Question 9

Which SGOS edition is designed for Secure Web Gateway deployments?

Accepted Answer

A)  Premium Edition 
B)  MACH5 edition 
C)  SWG Edition 
D)  Proxy Edition

Question 10

Which of the following are recommended to improve CPU performance? (Choose two.)

Accepted Answer

A)  Edit the size of emulated certificates 
B)  Deny wildcard certificates 
C)  Enable DHE 
D)  Reduce the number of emulated certificates

Question 11

What variable increases when a detector is triggered by a suspicious behavior?

Accepted Answer

A)  Risk Rating 
B)  Business Readiness Rating (BRR) 
C)  Incident Index 
D)  ThreatScore

Question 12

When the ProxySG uses a virtual URL for user authentication, what must the virtual URL point to?

Accepted Answer

A)  The IP address of the origin content server 
B)  A hostname that the user agent can DNS-resolve to an IP address 
C)  None of these answers 
D)  The IP address of the ProxySG

Question 13

SGOS is based on which other operating system?

Accepted Answer

A)  Unix 
B)  VxWorks 
C)  pSOS 
D)  None of these answers 
E)  Windows

Question 14

What should an administrator utilize to steer traffic from client devices to the CloudSOC gateway?

Accepted Answer

A)  SpanVA 
B)  ProxySG 
C)  The Reach agent 
D)  SCP/SFTP

Question 15

What is the objective of File Sharing policies?

Accepted Answer

A)  To restrict the direct sharing of documents from cloud applications based both on their content and the characteristics of the user. 
B)  To prevent users from sharing documents, either publicly, externally, or internally. 
C)  To notify an administrator when activities, such as objects being modified, are performed in a cloud application. 
D)  To restrict the uploading and downloading of documents from the user's computer to the cloud application, based both on the content of the documents, and the characteristics of the user.

Question 16

When policy created in the VPM is installed, what two files does the VPM update on the ProxySG? (Choose two.)

Accepted Answer

A)  Local policy file 
B)  Central policy file 
C)  VPM-XML file 
D)  VPM-CPL file

Question 17

What should an administrator use to identify document types specified by the user?

Accepted Answer

A)  Custom dictionaries 
B)  Training profiles 
C)  Risk types 
D)  Content types

Question 18

What would happen if the ProxySG did not use surrogate credentials to authenticate users who use transparent proxy connections?

Accepted Answer

A)  They would not be able to authenticate to the ProxySG 
B)  The ProxySG does not need to use surrogate credentials to authenticate users who use transparent proxy connections 
C)  They would have to reauthenticate for each domain that they access

Exam 3: Administration of Symantec Data Loss Prevention 12 (Broadcom)