Question 1

Which of the following Firewall rule actions will allow data packets to pass through the Firewall Protection Module without being subjected to analysis by the Intrusion Prevention Protection Module?

Options :

A : Deny

B : Bypass

C : Allow

D : Force Allow

Answer: B

Question 2

Which of the following statements is true regarding Intrusion Prevention rules?

Options :

A : Intrusion Prevention rules can block unrecognized software from executing.

B : Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

C : Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

D : Intrusion Prevention rules monitor the system for changes to a baseline configuration.

Answer: C

Question 3

When viewing the details for a policy, as displayed in the exhibit, you notice that the Application Control

Protection Module is not available. In this example, why would this Protection Modules not be available?

Deep-Security-Professional-page44-image6

Options :

A : The Application Control Protection Module has been disabled at the Base Policy level and is not displayed in the details for child policies.

B : The Application Control Protection Module is only supported on Linux computers, the policy details displayed are for Windows computers only.

C : An Activation Code for the Application Control Protection Module has not been pro-vided. Unlicensed Protection Modules will not be displayed.

D : The Application Control Protection Modules has not been enabled for this tenant.

Answer: C

Question 4

The maximum disk space limit for the Identified Files folder is reached. What is the expected Deep Security Agent behavior in this scenario?

Options :

A : Any existing files are in the folder are compressed and forwarded to Deep Security Manager to free up disk space.

B : Deep Security Agents will delete any files that have been in the folder for more than 60 days.

C : Files will no longer be able to be quarantined. Any new files due to be quarantined will be deleted instead.

D : Deep Security Agents will delete the oldest files in this folder until 20% of the allocated space is available.

Answer: D

Question 5

Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply

Options :

A : Once the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.

B : Software updates performed by a Trusted Updater will be automatically approved.

C : Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

D : Maintenance mode can be enabled while completing the updates.

Answer: B,D

Confidently Practice Online with Free Deep-Security-Professional Exam Cram

Buying Options: