EMT Practice Test

1. Question Content...

---

Question1: What module should an administrator use to create policies with one click, and send them to the Protect Module?

Question2: What are three (3) main risks that CloudSOC solves in cloud applications?

Question3: What are the four (4) types of detectors?

Question4: What module should an administrator utilize to view all the activities in cloud applications and conduct analysis?

Question5: Refer to the exhibit. Which module(s) are utilized in the use case "Identify and understand how information is used within cloud applications"?

Question6: What module can an administrator use to connect certain cloud applications to CloudSOC via APIs, and have complete visibility into the content being shared in those cloud applications?

Question7: What type of log upload should an administrator use during production?

Question8: How does the Securlet module get data?

Question9: Which CloudSOC module is similar to a Data Loss Prevention (DLP) system?

Question10: How should an administrator handle a cloud application that fails to meet compliance requirements, but the business need outweighs the risk?

Question11: What is the objective of the Access Enforcement policy?

Question12: Which type of a policy can perform a user log out from Single Sign On?

Question13: Refer to the exhibit. Which CloudSOC module(s) use firewalls and proxies as data sources?

Question14: What type of solution should an administrator implement to secure the way users interact with cloud applications?

Question15: What is one of the security challenges generated by the proliferation of cloud applications?

Question16: What should an administrator do with a cloud application that does NOT meet the compliance requirements, but has mitigating controls available?

Question17: What type of connection should an administrator use when the network is sensitive to the bandwidth consumed by log traffic transfer to CloudSOC?

Question18: What CloudSOC module should an administrator use to prevent the accidental and intentional exposure of information within cloud applications?

Question19: Refer to the exhibit. What modules are used by the use case "Identify and determine business risk of cloud applications being used within the organization"?

Question20: Which CloudSOC module is similar to an Intrusion Protection System (IPS)/Intrusion Detection System (IDS)?

Question21: Refer to the exhibit. An administrator found several incidents like this in the Investigate module. What type of detector should an administrator modify to reduce the frequency of this type of incident?

Question22: Which action should an administrator take if a cloud application fails to meet security and compliance requirements, but the business need outweighs the risks?

Question23: Where should an administrator locate unshared content within the Securlet module that contains risky information?

Question24: How should an administrator handle a cloud application that is business critical, but is NOT the most secure option?

Question25: What should an administrator utilize to steer traffic from client devices to the CloudSOC gateway?

Question26: Refer to the exhibit. Which module(s) use the CloudSOC gateway as a data source?

Question27: What Rule Type in ContentIQ profiles do FERPA, GLBA, HIPAA, PCI AND PII belong to?

Question28: What categories should an administrator utilize to classify cloud applications during the cloud applications adoption workflow?

Question29: What Rule Type in ContentIQ do movies, presentations, raster images, spreadsheets, word processors, and vector graphics belong to?

Question30: Refer to the exhibit. An administrator found this incident in the Investigate module. What type of policy should an administrator create to get email notifications if the incident happens again?

Question31: Refer to the exhibit. What action should an administrator take if this incident was found in the Investigate module?

Question32: What policy should an administrator utilize to prevent users from downloading files from Box.com when they are outside the corporate IP range?

Question33: Who causes 80% of data leaks?