Question 1

When viewing the details for a policy, as displayed in the exhibit, you notice that the Application Control

Protection Module is not available. In this example, why would this Protection Modules not be available?

Deep-Security-Professional-page44-image6

Options :

A : The Application Control Protection Module has been disabled at the Base Policy level and is not displayed in the details for child policies.

B : The Application Control Protection Module is only supported on Linux computers, the policy details displayed are for Windows computers only.

C : An Activation Code for the Application Control Protection Module has not been pro-vided. Unlicensed Protection Modules will not be displayed.

D : The Application Control Protection Modules has not been enabled for this tenant.

Answer: C

Question 2

Which of the following statements is true regarding Intrusion Prevention rules?

Options :

A : Intrusion Prevention rules can block unrecognized software from executing.

B : Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

C : Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

D : Intrusion Prevention rules monitor the system for changes to a baseline configuration.

Answer: C

Question 3

Which of the following statements is true regarding Firewall Rules?

Options :

A : Firewall Rules applied to Policy supersede similar rules applied to individuals computers.

B : When traffic is intercepted by the network filter, Firewall Rules in the policy are always applied before any other processing is done.

C : Firewall Rules applied through a parent-level Policy cannot be unassigned in a child-level policy.

D : Firewall Rules are always processed in the order in which they appear in the rule list, as displayed in the Deep Security manager Web console.

Answer: C

Question 4

Which of the following Protection Modules does not benefit from Recommendation Scans?

Options :

A : Log Inspection

B : Integrity Monitoring

C : Firewall

D : Intrusion Prevention

Answer: C

Question 5

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is

true?

Deep-Security-Professional-page44-image13

Options :

A :

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again

within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart

Protection source.

B :

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network

engine.

C :

Any events generated by computers within your corporate network, as defined by an IP address range,

will be ignored

D :

Live packet streams coming through the network engine will be replicated and all traffic analysis will be

performed on the replicated stream

Answer: A

Confidently Practice Online with Free Deep-Security-Professional Exam Cram

Buying Options: