Practice Deep-Security-Professional Exam Online

Question 1

The maximum disk space limit for the Identified Files folder is reached. What is the expected Deep Security Agent behavior in this scenario?

A : Any existing files are in the folder are compressed and forwarded to Deep Security Manager to free up disk space.

B : Deep Security Agents will delete any files that have been in the folder for more than 60 days.

C : Files will no longer be able to be quarantined. Any new files due to be quarantined will be deleted instead.

D : Deep Security Agents will delete the oldest files in this folder until 20% of the allocated space is available.

Answer: D

Question 2

Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply

A : Once the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.

B : Software updates performed by a Trusted Updater will be automatically approved.

C : Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

D : Maintenance mode can be enabled while completing the updates.

Answer: B,D

Question 3

Which of the following Firewall rule actions will allow data packets to pass through the Firewall Protection Module without being subjected to analysis by the Intrusion Prevention Protection Module?

A : Deny

B : Bypass

C : Allow

D : Force Allow

Answer: B

Question 4

Which of the following statements is true regarding Intrusion Prevention rules?

A : Intrusion Prevention rules can block unrecognized software from executing.

B : Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

C : Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

D : Intrusion Prevention rules monitor the system for changes to a baseline configuration.

Answer: C

Question 5

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is

true?

Deep-Security-Professional-page44-image13

A :

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again

within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart

Protection source.

B :

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network

engine.

C :

Any events generated by computers within your corporate network, as defined by an IP address range,

will be ignored

D :

Live packet streams coming through the network engine will be replicated and all traffic analysis will be

performed on the replicated stream

Answer: A

Name:	Trend Micro Certified Professional for Deep Security
Exam Code:	Deep-Security-Professional
Certification:	Trend Micro Certified Professional for Deep Security
Vendor:	Trend
Total Questions:	80
Last Updated:	Apr 22, 2024

Trend Deep-Security-Professional