Question 1

Which of the following Firewall rule actions will allow data packets to pass through the Firewall Protection Module without being subjected to analysis by the Intrusion Prevention Protection Module?

Options :

A : Deny

B : Bypass

C : Allow

D : Force Allow

Answer: B

Question 2

Which of the following Protection Modules does not benefit from Recommendation Scans?

Options :

A : Log Inspection

B : Integrity Monitoring

C : Firewall

D : Intrusion Prevention

Answer: C

Question 3

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is

true?

Deep-Security-Professional-page44-image13

Options :

A :

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again

within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart

Protection source.

B :

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network

engine.

C :

Any events generated by computers within your corporate network, as defined by an IP address range,

will be ignored

D :

Live packet streams coming through the network engine will be replicated and all traffic analysis will be

performed on the replicated stream

Answer: A

Question 4

The maximum disk space limit for the Identified Files folder is reached. What is the expected Deep Security Agent behavior in this scenario?

Options :

A : Any existing files are in the folder are compressed and forwarded to Deep Security Manager to free up disk space.

B : Deep Security Agents will delete any files that have been in the folder for more than 60 days.

C : Files will no longer be able to be quarantined. Any new files due to be quarantined will be deleted instead.

D : Deep Security Agents will delete the oldest files in this folder until 20% of the allocated space is available.

Answer: D

Question 5

Which of the following statements is true regarding Intrusion Prevention rules?

Options :

A : Intrusion Prevention rules can block unrecognized software from executing.

B : Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

C : Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

D : Intrusion Prevention rules monitor the system for changes to a baseline configuration.

Answer: C