Question 1

Which of the following statements is true regarding Intrusion Prevention rules?

Options :

A : Intrusion Prevention rules can block unrecognized software from executing.

B : Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

C : Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

D : Intrusion Prevention rules monitor the system for changes to a baseline configuration.

Answer: C

Question 2

Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply

Options :

A : Once the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.

B : Software updates performed by a Trusted Updater will be automatically approved.

C : Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

D : Maintenance mode can be enabled while completing the updates.

Answer: B,D

Question 3

When viewing the details for a policy, as displayed in the exhibit, you notice that the Application Control

Protection Module is not available. In this example, why would this Protection Modules not be available?

Deep-Security-Professional-page44-image6

Options :

A : The Application Control Protection Module has been disabled at the Base Policy level and is not displayed in the details for child policies.

B : The Application Control Protection Module is only supported on Linux computers, the policy details displayed are for Windows computers only.

C : An Activation Code for the Application Control Protection Module has not been pro-vided. Unlicensed Protection Modules will not be displayed.

D : The Application Control Protection Modules has not been enabled for this tenant.

Answer: C

Question 4

Which of the following Firewall rule actions will allow data packets to pass through the Firewall Protection Module without being subjected to analysis by the Intrusion Prevention Protection Module?

Options :

A : Deny

B : Bypass

C : Allow

D : Force Allow

Answer: B

Question 5

Which of the following Protection Modules does not benefit from Recommendation Scans?

Options :

A : Log Inspection

B : Integrity Monitoring

C : Firewall

D : Intrusion Prevention

Answer: C

Smartly Prepare Exam with Free Online Deep-Security-Professional Practice Test

Buying Options: