deep

Which of the following file types would not be evaluated by the Application Control protection module?

• .exe files

• .docx files

• .class files

• .py scripts

True or False: Standard Auto-tagging in Deep Security can only apply tags to events generated after the tagging has been enabled?

• True

• False

The Security Level for Web Reputation in a policy is set to High. A server assigned this policy attempts to access a Web site with a credibility score of 78. What is the result?

• The Agent display a warning message, as the site is unrated

• The Agent displays a message on the protected server prompting the operator to allow or block the connection

• The Agent allows access as the credibility score for the Web site is above the allowed threshold

• The Agent blocks access as the credibility score for the Web site is below the allowed threshold

When Agent Self Protection is enabled, users are prevented from performing which of the following activities? Select all that apply

• Modifyinf agent-related files

• Uninstalling or unloading the Agent

• Modifying agent-related Windows registry entries

• Stopping the Agent services

Which of the following is a benefit of adding your cloud vendor account to Deep Security instead of adding the individual instances of virtual machines?

• Adding your account allows a Deep Security Agent to be installed on the individual instances of virtual machines

• Adding your account ensures that changes in your cloud resource inventory are automatically reflected in the Computers list in the Deep Secutiry Web console

• Adding your account ensures that all events related to aparticular instances or virtual machines are recorded properly

• Adding your account ensures that you are properly billed by the protection modules you enable

True or False: When in Maintenance Mode, any preciously created Block rules are ignored. This allows previously blocked software to be updated

• True

• False

While viewing the details of the Firewall protection module in a child policy, you note that a few rules are already assigned. You try to disable these rules, but they cannot be unassigned. Why can these not be unassigned?

• The rules were assigned to the policy at the parent leve. Rules assigned to a parent policy cannot be unassigned at he child level

• The rules cannot be unassigned as the administrator currently logged into the Deep Security Web console does not have the permissions necessaty to unassing rules

• These rules have been hard-coded in the details of the policy. These rules will automatically be assigned to all Firewall policies that are created and cannot be unassigned

• The rules were assigned to the policy automatically when a Recommendation Schan was run. Ryles assigned through a Recommendation Schan cannot be disabled once assigned

Which of the following items can affect the amount of database space is required by Deep Security? Select all that apply

• Number of platforms on which you install Deep Security Agents

• How long event details are retained

• Number of ecents recorded per second

• Number of protected computers

True of False: Allow rules are always processed last as the are assigned a priority value of 0

• True

• False

The Intrusion Precention protection module is enabled and a Recommendation Scan is run to identify vulnerabilities on a Windows Server 2016 computer. How can you ensure that the list of recommendations is kept up tp date?

• Keeping the list of recommendations up to date is a manual operation. Monitor the Trend Micro Web site to find out which new rules have been deployed through security updates and enable those required in your configuration

• Enable Ongoing Scans to run a recommendation scan on a regular basis. This will identify new Intrusion Prevention rules that should be applied

• Recommendation Scans are only able to suggest Intrusion Prevention rules when the protection module is initially enabled

• Disabling, then re-enabling the Intrusion Prevention protection module will trigger a new Recommendation Schan to be run. New rules will be included in the results of this new scan