Question 1

The settings for an endpoint computer enables pre-execution Predictive Machine Learning using the Apex One Security Agent. The computer, however, does not have an Internet connection to submit the file features to the Machine Learning model on the Smart Protection Network. How can this endpoint benefit from Machine Learning scans when it can not reach the Internet? Select all that apply.

Options :

A : The environment can be configured so that Machine Learning requests are performed through a local Smart Protection Server on the network. In this scenario, the Smart Protection Server serves as a proxy to submit the file features to the Smart Protection Network.

B : The endpoint has access to a Predictive Machine Learning Local File Model which allows pre executionPredictive Machine Learning scans to be performed locally when there is no Internet connection.

C : Predictive Machine Learning requires a connection to the Internet to function. Without an Internet connection on the endpoint, this type of scan is skipped.

D : Predictive Machine Learning scans can performed by a local Smart Protection Server. The Smart Protection Server updates its version of the Machine Learning Model regularly to ensure it is always up to date.

Answer: A,B

Question 2

Which of the following is the correct sequence of events when malware samples are submitted to Deep Discover Analyzer by a Security Agent?

Options :

A : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the malware sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

B : 1. The Security Agent sends the malware sample to Apex Central. 2. Apex Central forwards the sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4.Apex Central forwards the Suspicious Objects List to the Apex One Server.

C : 1. The Security Agent sends the malware sample to Deep Discovery Analyzer for analysis. 2. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 3. Apex Central forwards the Suspicious Objects List to the Apex One Server.

D : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the sample to Apex Central. 3. Apex Central sends it to Deep Discovery Analyzer for analysis. 4. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

Answer: A

Question 3

A collection of Security Agents is moved from one domain to another in the Agent Tree. The administrator would like to confirm that the settings of the new domain are being applied properly to the newly moved Agents. Which of the following are appropriate methods for doing this? Select all that apply.

Options :

A : The administrator can verify the settings from the Agent Details.

B : Security Agents will always have the appropriate settings for their domain, there is no need to verify this.

C : The administrator can click Update Now from the Security Agent console window to refresh each Agent.

D : The administrator can run a Compliance Report and verify the results on the Settings tab. Any endpoints in the domain with inconsistent settings will be displayed.

Answer: D

Question 4

An administrator is responsible for deploying Security Agents on endpoint computers within their organization. They attempt to download an Apex One Security Agent installation package from Apex Central and they note that an available Installation Mode option for the Agent is Coexist Mode, as shown in the exhibit. Which of the following answers best describes Coexist Mode?

Options :

A : Coexist Mode allows third-party security products to be used on the endpoint computer in addition to Apex One. In this mode, Apex One can be used to supplement security features not provided by the other vendor.

B : Coexist mode allows third-party security applications to store their event data in the Apex One Server database. This allows Apex One administrators to view all events details generated on the endpoint, regardless of the source, from within the Apex One Web Management console.

C : Coexist mode allows a Security Agent to be installed on the same computer as the Apex One Server.

D : Coexist mode allows multiple Trend Micro Security Agents to be installed on the same endpoint computer, for example, Apex One can be used for Anti-Malware and Web Reputation protection and Deep Security can be used for Integrity Monitoring protection.

Answer: A

Question 5

Which of the following statements regarding File Census in Apex One is FALSE?

Options :

A : Census needs a Smart Protection Server (Integrated or Standalone) in order to work.

B : Census can check for information coming through emails.

C : Census is dependent on Behaviour Monitoring.

D : Census can check on http and https channels.

Answer: D

Confidently Practice Online with Free Apex-One Exam Cram

Buying Options: