Free Trend Micro Deep-Security-Professional Practice Exam with Questions & Answers | Set: 2

Adding a tag to an Event modifies the Event data by adding fields, including the name of the tag, the date the tag was applied, and whether the tag was applied manually or automatically

Only a single tag can be assigned to an Event.

Events can be tagged automatically if they are similar to known good Events.

Events can be automatically deleted based on tags.

Intrusion Prevention rules can block unrecognized software from executing.

Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet

Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.

Intrusion Prevention rules monitor the system for changes to a baseline configuration.

The Anti-Malware and Web Reputation Protection Modules can make use of the locally installed Smart Protection Server.

All Protection Modules can make use of the locally installed Smart Protection Server

Anti-Malware is the only Protection Modules that can use the locally installed Smart Protection Server.

The Anti-Malware, Web Reputation and Intrusion Prevention Protection Modules can make use of the locally installed Smart Protection Server.

Firewall rules using the Allow action always have a priority of 4.

Firewall rules using the Allow action can be assigned a priority between 0 and 4.

Firewall rules using the Allow action can be assigned a priority between 1 and 3.

Firewall rules using the Allow action always have a priority of 0.

Firewall

Integrity Monitoring

Intrusion Prevention

Application Control

IntelliScan is a method of identifying which files are subject to malware scanning as determined from the file content. It uses the file header to verify the true file type.

IntelliScan is a mechanism that improves scanning performance. It recognizes files that have already been scanned based on a digital fingerprint of the file.

IntelliScan reduces the risk of viruses entering your network by blocking real-time compressed executable files and pairs them with other characteristics to improve mal-ware catch rates.

IntelliScan is a malware scanning method that monitors process memory in real time. It can identify known malicious processes and terminate them.

Machine Learning is malware detection technique in which features of an executable file are compared against a cloud-based learning model to determine the probability of the file being malware.

Machine Learning is a malware detection technique in which files are scanned based on the true file type as determined by the file content, not the extension.

Machine Learning is a malware detection technique in which the Deep Security Agent monitors process memory in real time and once a process is deemed to be suspicious, Deep Security will perform additional checks with the Smart Protection Network to determine if this is a known good process.

Machine Learning is malware detection technique in which processes on the protected computer are monitored for actions that are not typically performed by a given process.

This rule will allow incoming TCP and UPD communication to this server.

This rule will allow outgoing TCP and UPD communication from this server.

This rule will allow TCP and UPD replies to requests originating on this server.

This rule will allow incoming communication to this server, but not TCP and UPD.

The credibility scores for visited web sites will be cached. If access to the web site is re-quested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

Packets failing the Network Packet Sanity Check will still be allowed to pass through the network engine.

Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

Deep Security Agents forward Log Inspection Event details to Deep Security Manager in real time.

Log Inspection can only examine new Events and cannot examine logs entries created before the Protection Module was enabled.

Log Inspection can only examine Deep Security log information.

The Log Inspection Protection Module is supported in both Agent-based and Agentless implementations.