Trend Deep-Security-Professional Exam Questions Instant Access

Question 1

Which of the following correctly describes the Firewall rule Action of Force Allow?

AForce Allow permits traffic that would otherwise be denied by other Firewall rules to pass, but still enforces filtering by the Intrusion Prevention Protection Module.

BForce Allow permits traffic to bypass analysis by both the Firewall and Intrusion Pre-vention Protection Modules.

CForce Allow explicitly allows traffic that matches the Firewall rule to pass, and implicitly denies all other traffic.

DForce Allow permits traffic to bypass analysis by all Deep Security Protection Modules.

Answer : A

Question 2

What is the purpose of the override.properties file?

AThis file is used to transfer policy settings from one installation of Deep Security Man-ager to another

BThis file allows properties to be tested on Deep Security Manager without affecting the original configuration.

CThis file contains the original out-of-the-box configuration properties for Deep Security Manager. This file is renamed to dsm.properties upon initialization of Deep Security Manager.

DThis file allows Deep Security Agents to override enforced behavior by providing new policy configuration details.

Answer : B

The properties specified in this configuration file override the properties specified in the dsm.properties file. This file can be created manually by a support engineer to modify product be-havior without affecting the original configuration.

Explication: Study Guide - page (42)

Question 3

Which of the following statements is true regarding Firewall Rules?

AFirewall Rules applied to Policy supersede similar rules applied to individuals computers.

BWhen traffic is intercepted by the network filter, Firewall Rules in the policy are always applied before any other processing is done.

CFirewall Rules applied through a parent-level Policy cannot be unassigned in a child-level policy.

DFirewall Rules are always processed in the order in which they appear in the rule list, as displayed in the Deep Security manager Web console.

Answer : C

Question 4

A collection of servers protected by Deep Security do not have Internet access. How can Smart Scan be used on these computers.

AInstall a Smart Protection Server in the environment and set it as the source for File Reputation information.

BSmart Scan must contact the Smart Protection Network to function. Any servers without Internet access will be unable to use Smart Scan.

CPromote one of the Deep Security Agents on the air gapped computers to become a Re-lay.

DSmart Scan can be configured to use a local pattern file containing the same information as the Smart Protection Network.

Answer : A

Agent-airgapped

Question 5

What is the purpose of the Deep Security Relay?

ADeep Security Relays distribute load to the Deep Security Manager nodes in a high-availability implementation.

BDeep Security Relays forward policy details to Deep Security Agents and Virtual Ap-pliances immediately after changes to the policy are applied.

CDeep Security Relays maintain the caches of policies applied to Deep Security Agents on protected computers to improve performance.

DDeep Security Relays are responsible for retrieving security and software updates and distributing them to Deep Security Manager, Agents and Virtual Appliances.

Answer : D

Question 6

Which of the following statements correctly describes Smart Folders?

ASmart Folders identify the folders that will be scanned when a Real-Time, Manual or Scheduled malware scan is run.

BSmart Folders are a collection of subfolders containing the policy settings that are ap-plied to child policies or directly to Computers.

CSmart Folders act as a saved search of computers which is executed each time the folder is clicked to display its contents.

DSmart Folders are the containers used to store the results of Recommendation Scans. Once a Recommendation Scan has completed, and administrator can click a Smart Folder and select which of the recommended rules to apply.

Answer : C

Smart Folders are used to group your computers dynamically. The computers displayed in a Smart Folder are determined by a set of custom rules, that act as a saved search which is executed each time you click on the folder to display its contents. This allows administrators to easily filter and group computers by these defined properties.

Explication: Study Guide - page (127)

Question 7

While viewing the details of the Firewall Protection Module, as displayed in the exhibit, you note that a few rules have already been assigned. You try to disable these rules, but they can not be unassigned. Why can the displayed rules not be unassigned?

AThe rules displayed in the exhibit have been hard-coded with the details of the policy. These rules will automatically be assigned to all Firewall policies that are created and can not be unassigned.

BThe rules displayed in the exhibit have been assigned to the policy at the parent level. Rules assigned to a parent policy can not be unassigned at the child level.

CThe rules displayed in the exhibit were assigned to the policy automatically when a Recommendation Scan was run. Rules assigned through a Recommendation Scan can not be disabled once assigned.

DThe rules displayed in the exhibit can not be unassigned as the administrator currently logged into the Deep Security Manager Web console does not have the permissions necessary to unassign rules.

Answer : B

Trend Micro Certified Professional for Deep Security Deep-Security-Professional Exam Questions