Question 1

What type of log upload should an administrator use during production?

Accepted Answer

SCP/SFTP is a secure file transfer protocol that is commonly used for uploading logs during production.

Question 2

What type of connection should an administrator use when the network is sensitive to the bandwidth consumed by log traffic transfer to CloudSOC?

Accepted Answer

The answer of What type of connection should an administrator...

Question 3

What Rule Type in ContentIQ profiles do FERPA, GLBA, HIPAA, PCI AND PII belong to?

Accepted Answer

The answer of What Rule Type in ContentIQ profiles do...

Question 4

Refer to the exhibit. Which module(s) are utilized in the use case "Identify and understand how information is used within cloud applications"?

Accepted Answer

The answer of Refer to the exhibit. Which module(s) are...

Question 5

What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

Accepted Answer

Content format is the rule type in ContentIQ that movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to.

Question 6

Where should an administrator locate unshared content within the Securlet module that contains risky information?

Accepted Answer

The answer of Where should an administrator locate unshared content...

Question 7

What is one of the security challenges generated by the proliferation of cloud applications?

Accepted Answer

The answer of What is one of the security challenges...

Question 8

How does the Securlet module get data?

Accepted Answer

The Securlet module gets data from both the CloudSOC gateway and cloud application APIs.

Question 9

What policy should an administrator utilize to prevent users from downloading files from Box.com when they are outside the corporate IP range?

Accepted Answer

The answer of What policy should an administrator utilize to...

Question 10

What module can an administrator use to connect certain cloud applications to CloudSOC via APIs, and have complete visibility into the content being shared in those cloud applications?

Accepted Answer

Securlets are used in CloudSOC to connect cloud applications via APIs, providing visibility and control over the data shared within those applications.

Question 11

Refer to the exhibit. An administrator found several incidents like this in the Investigate module. What type of detector should an administrator modify to reduce the frequency of this type of incident?

Accepted Answer

The answer of Refer to the exhibit. An administrator found...

Question 12

Who causes 80% of data leaks?

Accepted Answer

The answer of Who causes 80% of data leaks?
...

Question 13

Which action should an administrator take if a cloud application fails to meet security and compliance requirements, but the business need outweighs the risks?

Accepted Answer

Monitoring the application allows the business to continue using it while keeping an eye on potential security and compliance issues, balancing the business need with risk management.

Question 14

What should an administrator do with a cloud application that does NOT meet the compliance requirements, but has mitigating controls available?

Accepted Answer

Mitigating controls can be used to address compliance gaps, allowing the application to be sanctioned while ensuring compliance requirements are met.

Question 15

Refer to the exhibit. What modules are used by the use case "Identify and determine business risk of cloud applications being used within the organization"?

Accepted Answer

The answer of Refer to the exhibit. What modules are...

Question 16

How should an administrator handle a cloud application that is business critical, but is NOT the most secure option?

Accepted Answer

Monitoring the application allows the administrator to keep an eye on its usage and security risks while still allowing the business to function, as blocking it might disrupt critical operations.

Question 17

What CloudSOC module should an administrator use to prevent the accidental and intentional exposure of information within cloud applications?

Accepted Answer

The Protect module in CloudSOC is designed to prevent accidental and intentional exposure of information within cloud applications by enforcing security policies and controls.

Question 18

Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

Accepted Answer

The answer of Refer to the exhibit. Which module(s) use...

Exam 3: Administration of Symantec Data Loss Prevention 12 (Broadcom)