Question 1

A collection of Security Agents is moved from one domain to another in the Agent Tree. The administrator would like to confirm that the settings of the new domain are being applied properly to the newly moved Agents. Which of the following are appropriate methods for doing this? Select all that apply.

Options :

A : The administrator can verify the settings from the Agent Details.

B : Security Agents will always have the appropriate settings for their domain, there is no need to verify this.

C : The administrator can click Update Now from the Security Agent console window to refresh each Agent.

D : The administrator can run a Compliance Report and verify the results on the Settings tab. Any endpoints in the domain with inconsistent settings will be displayed.

Answer: D

Question 2

Security Agents are displaying as Offline in the Agent Management list in the Apex One Web Management console. Which of the following could be a reason for this and how would you resolve the issue?

Options :

A : The Security Agents are connecting to an old Apex One Server. The Server Tuner tool can be used to reassign the Agent to the new Apex One Server to resolve the issue.

B : The Security Agents are not installed on endpoint computers on the internal network. Run the Verify Connection command from the Security Agent computers and update their status to "Roaming" to resolve the issue.

C : Users logged into these Security Agents have manually stopped the Real-Time Scan service. Force a restart on these Agents to resolve this issue.

D : The Security Agents are installed on endpoint computers behind a NAT device, therefore the Server cannot see them. Enable the Agent Heartbeat feature to resolve this issue.

Answer: D

Question 3

Which of the following is the correct sequence of events when malware samples are submitted to Deep Discover Analyzer by a Security Agent?

Options :

A : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the malware sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

B : 1. The Security Agent sends the malware sample to Apex Central. 2. Apex Central forwards the sample to Deep Discovery Analyzer for analysis. 3. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4.Apex Central forwards the Suspicious Objects List to the Apex One Server.

C : 1. The Security Agent sends the malware sample to Deep Discovery Analyzer for analysis. 2. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 3. Apex Central forwards the Suspicious Objects List to the Apex One Server.

D : 1. The Security Agent sends the malware sample to the Apex One Server. 2. The Apex One Server forwards the sample to Apex Central. 3. Apex Central sends it to Deep Discovery Analyzer for analysis. 4. After analysis, the Deep Discovery Analyzer sends the results to Apex Central. 4. Apex Central forwards the Suspicious Objects List to the Apex One Server.

Answer: A

Question 4

Which of the following Apex One Server components can you install as part of the setup process?

Options :

A : Apex One (Mac)

B : Apex One Data Protection

C : An Integrated Smart Protection Server

D : The Apex One Edge Relay Server

Answer: C

Question 5

The settings for an endpoint computer enables pre-execution Predictive Machine Learning using the Apex One Security Agent. The computer, however, does not have an Internet connection to submit the file features to the Machine Learning model on the Smart Protection Network. How can this endpoint benefit from Machine Learning scans when it can not reach the Internet? Select all that apply.

Options :

A : The environment can be configured so that Machine Learning requests are performed through a local Smart Protection Server on the network. In this scenario, the Smart Protection Server serves as a proxy to submit the file features to the Smart Protection Network.

B : The endpoint has access to a Predictive Machine Learning Local File Model which allows pre executionPredictive Machine Learning scans to be performed locally when there is no Internet connection.

C : Predictive Machine Learning requires a connection to the Internet to function. Without an Internet connection on the endpoint, this type of scan is skipped.

D : Predictive Machine Learning scans can performed by a local Smart Protection Server. The Smart Protection Server updates its version of the Machine Learning Model regularly to ensure it is always up to date.

Answer: A,B