ST0-237 by Symantec Valid Free Exam Practice Test

Question 1

A company has SMTP Prevent deployed with email blocking enabled in their confidential data policy. The finance department reports that emails containing sensitive data sent to external business partners are being blocked. The company maintains a list of the external business partner domains.
How can a policy be modified so that emails are sent only to authorized recipients?

A. create a new rule in the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "At least 1 recipient must match" for Match Counting B. duplicate the confidential data policy, add a rule based on "Sender Matches Pattern", and add the email addresses of all employees in the finance department, select "All senders must match" for Match Counting C. add an exception to the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "All recipients must match" for Match Counting D. add an exception to the policy based on "Recipient Matches Pattern", add the authorized email domains of business partners to the recipient pattern and select "At least 1 recipient must match" for Match Counting

Correct Answer: C

Question 2

Which structure records are stored in the private region? (Each correct answer presents part of the solution. Select three.)

A. Disk group configuration B. Disk and disk group ID C. File system metadata D. Disk group kernel log E. Partition tables

Correct Answer: A,B,D

Question 3

Which three are valid Reconciliation Rule types in Symantec Control Compliance Suite 9.0? (Select three.)

A. Change Rule B. Add Rule C. Update Rule D. Delete Rule E. Pre Rule

Correct Answer: B,C,E

Question 4

You work in a Server Operations Center (SOC), and you are required to track the status of the VxVM tasks in progress on a UNIX server. Another member of the administration team is scheduled to execute VxVM changes; you are also responsible for tracking the progress of those changes. In addition, you are required to escalate any issues with the change to the team member.
How would you execute this task?

A. By using OS-level process monitoring tools, such as top or prstat B. By using vxtask status to track active VxVM tasks C. By using vxassist monitor to track active VxVM tasks D. By using vxtask monitor to track active VxVM tasks

Correct Answer: D

Question 5

When configuring DLP Agents, what does the File Recovery Area Location setting determine?

A. the location of files quarantined through Endpoint Discover scans B. the secure filestore of incidents and data while agents are offline C. the location of files for redeployment or upgrade of agents D. the temporary backup location of blocked files

Correct Answer: D

Question 6

Where are evaluation results stored?

A. Evidence database B. Production database C. Reporting database D. Response database

Correct Answer: B

Question 7

Which databases are created by Symantec Control Compliance Suite 9.0 Reporting and Analytics during installation?

A. bv, Compliance Manager, Policy Manager B. Evidence, Standards, Policies C. Production, Reporting, Evidence D. Dashboard, Reporting, SMC

Correct Answer: C

Question 8

A company needs to scan all of its file shares on a weekly basis to make sure sensitive data is being stored correctly. The total volume of data on the file servers is greater than 1 TB.
Which approach will allow the company to quickly scan all of this data on a weekly basis?

A. run an initial complete scan of all the file shares, then modify the scan target to add date filters and exclude any files created or modified before the initial scan was run B. create a separate scan target for each file share and exclude files accessed before the start of each scan C. run an initial complete scan of all the file shares, then modify the scan target to an incremental scan type D. run an initial complete scan of all file shares, create a summary report of all incidents created by the scan, then run weekly scans and compare incidents from weekly scans to incidents from the complete scan

Correct Answer: C

Question 9

Which two collector types can be used to import assets into the Symantec Control Compliance Suite 9.0 asset system? (Select two.)

A. DPS B. Domain C. CSV D. XML E. Default

Correct Answer: C,E

Question 10

Which three database maintenance tasks must be performed outside of Symantec Control Compliance Suite 9.0? (Select three.)

A. Purge evidence B. Purge stale data C. Defragment the databases D. Shrink the databases E. Back up the databases

Correct Answer: C,D,E

Question 11

While accessing a node in the Dynamic Multipathing (DMP) database you get an error "VxVM vxdmp NOTICE V-5-0-111 disabled dmpnode dmpnode_device_number".
How will you resolve this error? (Each correct answer presents part of the solution. Select two.)

A. If possible correct the hardware failures Then, recover the volume using the vxrecover command. B. Check the underlying hardware to recover the desired path. C. Enable the appropriate controllers to allow at least one path under this DMP node. D. Replace the hardware because there may be a problem with host-bus adapter.

Correct Answer: B,C

Question 12

What can cause an increase in the DLP Agent footprint?

A. API lookups B. additional policies C. additional Agent Components D. Smart Response rules

Correct Answer: B

Question 13

If Endpoint Prevent and Endpoint Discover are competing for resources on an endpoint computer, how does the system resolve the conflict?

A. Endpoint Discover pauses any scans if resources are needed. B. Endpoint Discover queues files until resources are available. C. Endpoint Prevent pauses detection until any scans complete. D. Endpoint Prevent queues files until resources are available.

Correct Answer: A

Question 14

In the Symantec Control Compliance Suite 9.0 console, where is the status of Evaluation and Data Collection jobs displayed?

A. Home B. Manage C. Monitor D. Reporting

Correct Answer: C

Symantec Data Loss Prevention 12 Technical Assessment - ST0-237 Exam Practice Test