Question 1

Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply

Options :

A : Once the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.

B : Software updates performed by a Trusted Updater will be automatically approved.

C : Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

D : Maintenance mode can be enabled while completing the updates.

Answer: B,D

Question 2

The maximum disk space limit for the Identified Files folder is reached. What is the expected Deep Security Agent behavior in this scenario?

Options :

A : Any existing files are in the folder are compressed and forwarded to Deep Security Manager to free up disk space.

B : Deep Security Agents will delete any files that have been in the folder for more than 60 days.

C : Files will no longer be able to be quarantined. Any new files due to be quarantined will be deleted instead.

D : Deep Security Agents will delete the oldest files in this folder until 20% of the allocated space is available.

Answer: D

Question 3

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is

true?

Deep-Security-Professional-page44-image13

Options :

A :

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again

within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart

Protection source.

B :

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network

engine.

C :

Any events generated by computers within your corporate network, as defined by an IP address range,

will be ignored

D :

Live packet streams coming through the network engine will be replicated and all traffic analysis will be

performed on the replicated stream

Answer: A

Question 4

Which of the following Protection Modules does not benefit from Recommendation Scans?

Options :

A : Log Inspection

B : Integrity Monitoring

C : Firewall

D : Intrusion Prevention

Answer: C

Question 5

Which of the following statements is true regarding Firewall Rules?

Options :

A : Firewall Rules applied to Policy supersede similar rules applied to individuals computers.

B : When traffic is intercepted by the network filter, Firewall Rules in the policy are always applied before any other processing is done.

C : Firewall Rules applied through a parent-level Policy cannot be unassigned in a child-level policy.

D : Firewall Rules are always processed in the order in which they appear in the rule list, as displayed in the Deep Security manager Web console.

Answer: C

Confidently Practice Online with Free Deep-Security-Professional Exam Cram

Buying Options: