ST0-237無料問題集「Symantec Data Loss Prevention 12 Technical Assessment」

質問 1

Which traffic type will be excluded from analysis?

（A）Telnet

（B）Skype

（C）NNTP

（D）Yahoo! Instant Messenger

正解：B 解答を投票する

質問 2

A DLP administrator needs to forward data loss incidents to the company's Security Information and Event Management (SIEM) system. Which response rule action provides the administrator with the ability to accomplish this task?

（A）All: Add Note

（B）All: Send Email Notification

（C）All: Set Attribute

（D）All: Log to a Syslog Server

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A company needs to scan all of its file shares on a weekly basis to make sure sensitive data is being stored correctly. The total volume of data on the file servers is greater than 1 TB.
Which approach will allow the company to quickly scan all of this data on a weekly basis?

（A）run an initial complete scan of all file shares, create a summary report of all incidents created by the scan, then run weekly scans and compare incidents from weekly scans to incidents from the complete scan

（B）run an initial complete scan of all the file shares, then modify the scan target to add date filters and exclude any files created or modified before the initial scan was run

（C）run an initial complete scan of all the file shares, then modify the scan target to an incremental scan type

（D）create a separate scan target for each file share and exclude files accessed before the start of each scan

正解：C 解答を投票する

質問 4

From which organization are Symantec Control Compliance Suite 9.0 Predefined Standards most commonly derived?

（A）International Organization for Standardization

（B）National Institute of Standards and Technology

（C）Center for Internet Security

（D）National Security Agency

正解：C 解答を投票する

質問 5

What are two possible ways to provide incident match text information? (Select two.)

（A）XML export

（B）Syslog notification

（C）Email notification

（D）Reporting API

（E）CSV export

正解：A、D 解答を投票する

質問 6

What is the default limit to the number of subdisks that can be attached to a single plex?

（A）4096

（B）Unlimited

（C）1024

（D）2048

正解：A 解答を投票する

質問 7

Which two requirements must be met to successfully use Network Monitor on a Windows based detection server? (Select two.)

（A）ARP proxy must be enabled to ensure the Windows system captures all traffic.

（B）The network interface card must support Jumbo frames.

（C）At least two network interfaces must be available.

（D）Wireshark must be installed on the Windows system.

（E）WinPCAP must be installed on the Windows system.

正解：C、E 解答を投票する

質問 8

Which situation can be monitored by both Network Monitor and Endpoint Prevent?

（A）An employee uses AIM to send an instant message while off the corporate network.

（B）An employee uses Internet Explorer 7 to send confidential data from a Gmail account using https.

（C）An employee uses Skype to send an instant message to a friend at a competitor site.

（D）An employee uses a Chrome 2 browser to post confidential data to a newsgroup using http.

正解：D 解答を投票する

質問 9

When installing an Endpoint Server, at which point does it register with the Enforce Server?

（A）after recycling the server in the user interface

（B）After installation, the Endpoint Server automatically registers itself with the Enforce Server.

（C）after adding the server from within the Enforce user interface

（D）after restarting the Enforce Server

正解：C 解答を投票する

ST0-237 無料問題集「Symantec Data Loss Prevention 12 Technical Assessment」

弊社を連絡する

関連リンク

トップ試験