Question 1

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is

true?

Deep-Security-Professional-page44-image13

Options :

A :

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again

within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart

Protection source.

B :

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network

engine.

C :

Any events generated by computers within your corporate network, as defined by an IP address range,

will be ignored

D :

Live packet streams coming through the network engine will be replicated and all traffic analysis will be

performed on the replicated stream

Answer: A

Question 2

Which of the following Firewall rule actions will allow data packets to pass through the Firewall Protection Module without being subjected to analysis by the Intrusion Prevention Protection Module?

Options :

A : Deny

B : Bypass

C : Allow

D : Force Allow

Answer: B

Question 3

The maximum disk space limit for the Identified Files folder is reached. What is the expected Deep Security Agent behavior in this scenario?

Options :

A : Any existing files are in the folder are compressed and forwarded to Deep Security Manager to free up disk space.

B : Deep Security Agents will delete any files that have been in the folder for more than 60 days.

C : Files will no longer be able to be quarantined. Any new files due to be quarantined will be deleted instead.

D : Deep Security Agents will delete the oldest files in this folder until 20% of the allocated space is available.

Answer: D

Question 4

Which of the following Protection Modules does not benefit from Recommendation Scans?

Options :

A : Log Inspection

B : Integrity Monitoring

C : Firewall

D : Intrusion Prevention

Answer: C

Question 5

When viewing the details for a policy, as displayed in the exhibit, you notice that the Application Control

Protection Module is not available. In this example, why would this Protection Modules not be available?

Deep-Security-Professional-page44-image6

Options :

A : The Application Control Protection Module has been disabled at the Base Policy level and is not displayed in the details for child policies.

B : The Application Control Protection Module is only supported on Linux computers, the policy details displayed are for Windows computers only.

C : An Activation Code for the Application Control Protection Module has not been pro-vided. Unlicensed Protection Modules will not be displayed.

D : The Application Control Protection Modules has not been enabled for this tenant.

Answer: C

Higher Test Marks with Free Online Deep-Security-Professional Exam Practice

Buying Options: