Question 1

Which of the following best describes Assessment Mode in Apex One?

Options :

A : Assessment Mode provides a time period where files evaluated by the Security Agent are submitted to the Predictive Machine Learning model. Submissions provided while in Assessment Mode train the model to identify potential malware for your installation of Apex One.

B : Assessment Mode allows an administrator to evaluate items that Apex One detects as spyware/grayware or to monitor Web site access. When Assessment Mode is enabled, detections are logged only.

C : Assessment Mode allows administrator to maintain visibility of roaming users even when they are not using a VPN connection into the corporate network.

D : Assessment Mode provides a trial period for evaluating Apex One protection before requiring valid activation codes to be provided.

Answer: B

Question 2

An administrator is responsible for deploying Security Agents on endpoint computers within their organization. They attempt to download an Apex One Security Agent installation package from Apex Central and they note that an available Installation Mode option for the Agent is Coexist Mode, as shown in the exhibit. Which of the following answers best describes Coexist Mode?

Options :

A : Coexist Mode allows third-party security products to be used on the endpoint computer in addition to Apex One. In this mode, Apex One can be used to supplement security features not provided by the other vendor.

B : Coexist mode allows third-party security applications to store their event data in the Apex One Server database. This allows Apex One administrators to view all events details generated on the endpoint, regardless of the source, from within the Apex One Web Management console.

C : Coexist mode allows a Security Agent to be installed on the same computer as the Apex One Server.

D : Coexist mode allows multiple Trend Micro Security Agents to be installed on the same endpoint computer, for example, Apex One can be used for Anti-Malware and Web Reputation protection and Deep Security can be used for Integrity Monitoring protection.

Answer: A

Question 3

Which of the following is the correct sequence of events when malware samples are submitted to Deep Discover Analyzer by a Security Agent?

Options :

A : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the malware sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

B : 1. The Security Agent sends the malware sample to Apex Central. 2. Apex Central forwards the sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4.Apex Central forwards the Suspicious Objects List to the Apex One Server.

C : 1. The Security Agent sends the malware sample to Deep Discovery Analyzer for analysis. 2. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 3. Apex Central forwards the Suspicious Objects List to the Apex One Server.

D : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the sample to Apex Central. 3. Apex Central sends it to Deep Discovery Analyzer for analysis. 4. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

Answer: A

Question 4

Security Agents are displaying as Offline in the Agent Management list in the Apex One Web Management console. Which of the following could be a reason for this and how would you resolve the issue?

Options :

A : The Security Agents are connecting to an old Apex One Server. The Server Tuner tool can be used to reassign the Agent to the new Apex One Server to resolve the issue.

B : The Security Agents are not installed on endpoint computers on the internal network. Run the Verify Connection command from the Security Agent computers and update their status to "Roaming" to resolve the issue.

C : Users logged into these Security Agents have manually stopped the Real-Time Scan service. Force a restart on these Agents to resolve this issue.

D : The Security Agents are installed on endpoint computers behind a NAT device, therefore the Server cannot see them. Enable the Agent Heartbeat feature to resolve this issue.

Answer: D

Question 5

A collection of Security Agents is moved from one domain to another in the Agent Tree. The administrator would like to confirm that the settings of the new domain are being applied properly to the newly moved Agents. Which of the following are appropriate methods for doing this? Select all that apply.

Options :

A : The administrator can verify the settings from the Agent Details.

B : Security Agents will always have the appropriate settings for their domain, there is no need to verify this.

C : The administrator can click Update Now from the Security Agent console window to refresh each Agent.

D : The administrator can run a Compliance Report and verify the results on the Settings tab. Any endpoints in the domain with inconsistent settings will be displayed.

Answer: D