Apex-One EXAM PREPARATION

Prepare Smarter for the Apex-One Exam

Build your exam confidence with flexible preparation resources designed around the latest Apex-One exam objectives. Practice at your own pace using PDF questions, online exam simulations, or desktop practice software.

Question #1 (Topic: demo questions)

Which of following statements best describes Machine Learning in Deep Security?

Machine Learning is malware detection technique in which features of an executable file are compared against a cloud-based learning model to determine the probability of the file being malware.

Machine Learning is a malware detection technique in which files are scanned based on the true file type as determined by the file content, not the extension.

Machine Learning is a malware detection technique in which the Deep Security Agent monitors process memory in real time and once a process is deemed to be suspicious, Deep Security will perform additional checks with the Smart Protection Network to determine if this is a known good process.

Machine Learning is malware detection technique in which processes on the protected computer are monitored for actions that are not typically performed by a given process.

Correct Answer: A

Question #2 (Topic: demo questions)

The Intrusion Prevention Protection Module is enabled, but the traffic it is trying to analyze is encrypted through https. How is it possible for the Intrusion Prevention Protection Module to monitor this encrypted traffic against the assigned rules?

It is possible to monitor the https traffic by creating an SSL Configuration. Creating a new SSL Configuration will make the key information needed to decrypt the traffic available to the Deep Security Agent.

The Intrusion Prevention Protection Module is not able to analyze encrypted https traffic.

The Intrusion Prevention Protection Module can only analyze https traffic originating from other servers hosting a Deep Security Agent.

The Intrusion Prevention Protection Module can analyze https traffic if the public cer-tificate of the originating server is imported into the certificate store on the Deep Secu-rity Agent computer.

Correct Answer: A

Question #3 (Topic: demo questions)

The Firewall Protection Module is enabled on a server through the computer details. What is default behavior of the Firewall if no rules are yet applied?

All traffic is permitted through the firewall until either a Deny or Allow rule is assigned.

A collection of default rules will automatically be assigned when the Firewall Protection Module is enabled.

All traffic is blocked by the firewall until an Allow rule is assigned.

All traffic is passed through the Firewall using a Bypass rule

Correct Answer: B

Explanation:

Deep Security provides a set of Firewall rules that can be applied to policies or directly to a com- puter. These default rules provide coverage for typical scenarios. Set up the Deep Security firewall

Question #4 (Topic: demo questions)

Multiple Application Control Events are being displayed in Deep Security after a series of ap-plication updates and the administrator would like to reset Application Control. How can this be done?

On the Deep Security Agent computer, type the following command to reset Application Control: dsa_control -r

Click "Clear All" on the Actions tab in the Deep Security Manager Web console to reset the list of Application Control events.

Application Control can be reset by disabling the Protection Module, then enabling it once again. This will cause local rulesets to be rebuilt.

Application Control can not be reset.

Correct Answer: C

Page: 1 / 1