Free Sales Ending Soon - 100% Valid Deep-Security-Professional Exam Dumps with 82 Questions
Verified Deep-Security-Professional dumps Q&As on your Deep Security Exam Questions Certain Success!
The Trend Deep-Security-Professional exam consists of multiple-choice questions and covers a range of topics related to the Deep Security platform, including installation and configuration, security policies and rules, event management and reporting, and troubleshooting. Deep-Security-Professional exam also tests a candidate's knowledge of security best practices and industry standards, such as the Payment Card Industry Data Security Standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA).
Trend Micro Certified Professional for Deep Security is a certification program designed for professionals who want to enhance their knowledge and skills in implementing and managing the Trend Micro Deep Security product. Deep Security is a security solution that protects physical, virtual, and cloud workloads from various threats such as malware, network attacks, and unauthorized access. Trend Micro Certified Professional for Deep Security certification exam validates a candidate's ability to configure, deploy, and troubleshoot Trend Micro Deep Security in different environments.
Trend Deep-Security-Professional exam is targeted towards individuals who have experience working with Trend Micro's security products and have a deep understanding of security concepts and practices. Deep-Security-Professional exam covers a range of topics including virtualization security, network security, application security, and compliance. It is a comprehensive exam that requires a thorough understanding of the Deep Security solution and how it can be used to protect against modern cyber threats.
NEW QUESTION # 30
Which of the following statements is true regarding Maintenance Mode in the Application Control protection Module?
- A. When enabled, Maintenance Mode rescans the protected computer to rebuild the soft-ware inventory. Any new or changed software will be included in this rebuilt inventory.
- B. While in Maintenance Mode, all Block and Allow rules are ignored while new or updated applications are added to the software inventory
- C. When in Maintenance Mode, the Application Control Protection Module will continue to block software identified in Block rules, but will allow new and changed applications to be added to the software inventory.
- D. Maintenance Mode can be configured as a Scheduled Event. In this scenario, all soft-ware upgrades will be performed at the same time every day to avoid creating Alerts for normal software updates.
Answer: C
NEW QUESTION # 31
What is the purpose of the override.properties file?
- A. This file allows Deep Security Agents to override enforced behavior by providing new policy configuration details.
- B. This file allows properties to be tested on Deep Security Manager without affecting the original configuration.
- C. This file contains the original out-of-the-box configuration properties for Deep Security Manager. This file is renamed to dsm.properties upon initialization of Deep Security Manager.
- D. This file is used to transfer policy settings from one installation of Deep Security Man-ager to another
Answer: B
Explanation:
The properties specified in this configuration file override the properties specified in the dsm.properties file. This file can be created manually by a support engineer to modify product be-havior without affecting the original configuration.
Explication: Study Guide - page (42)
NEW QUESTION # 32
Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply.
- A. Software updates performed by a Trusted Updater will be automatically approved.
- B. Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.
- C. Maintenance mode can be enabled while completing the updates.
- D. Once the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.
Answer: A,C
Explanation:
Application Control can be configured to pre-approve updates either by performing them with a designated Trusted Updater (such as a software management tool or patch process) or by putting the agent in Maintenance Mode, during which changes are automatically approved. Manually editing the AC.db file is not a supported or recommended method.
Reference:
Trend Micro Deep Security Administrator's Guide, Application Control SectionExplication: Study Guide - page (303-304)
NEW QUESTION # 33
Which Deep Security Protection Modules can be used to provide runtime protection for the Kubernetes and Docker platforms? Select all that apply.
- A. Log Inspection
- B. Integrity Monitoring
- C. Anti-Malware
- D. Intrusion Prevention
Answer: B,C,D
Explanation:
Deep Security supports runtime protection for container environments (such as Kubernetes and Docker) using the following modules:
Intrusion Prevention protects container network traffic and blocks exploits.
Integrity Monitoring monitors for unauthorized or unexpected changes in files and configuration.
Anti-Malware scans for malware within containers and images.
Log Inspection is not currently available as a runtime protection feature for containers.
Reference:
Trend Micro Deep Security Administrator's Guide, Container Security and Runtime Protection Section
NEW QUESTION # 34
What is IntelliScan?
- A. IntelliScan is a mechanism that improves scanning performance. It recognizes files that have already been scanned based on a digital fingerprint of the file.
- B. IntelliScan is a method of identifying which files are subject to malware scanning as determined from the file content. It uses the file header to verify the true file type.
- C. IntelliScan is a malware scanning method that monitors process memory in real time. It can identify known malicious processes and terminate them.
- D. IntelliScan reduces the risk of viruses entering your network by blocking real-time compressed executable files and pairs them with other characteristics to improve mal-ware catch rates.
Answer: B
NEW QUESTION # 35
Recommendation scans can detect applications and/or vulnerabilities on servers on the network. Which of the following Protection Modules make use of Recommendation scans?
- A. Firewall, Application Control, and Integrity Monitoring
- B. Log Inspection, Application Control, and Intrusion Prevention
- C. Intrusion Prevention, Firewall, Integrity Monitoring and Log Inspection
- D. Intrusion Prevention, Integrity Monitoring, and Log Inspection
Answer: D
Explanation:
Recommendation Scans can suggest rules for the following Protection Modules:
* Intrusion Prevention
* Integrity Monitoring
* Log Inspection
Explication: Study Guide - page (161)
NEW QUESTION # 36
The details for an event are displayed in the exhibit. Based on these details, which Protection Module generated the event?
- A. Integrity Monitoring
- B. Firewall
- C. Intrusion Prevention
- D. Application Control
Answer: C
Explanation:
The event shows a "Reason" that references a specific rule (1000847 - OpenLDAP LDAP Server BIND Request DoS), an "Action" of "Reset," and the event origin as "Agent." This format is specific to the Intrusion Prevention module, which detects and responds to network exploits using assigned rules and provides detailed event logs including signature ID, action taken, and protocol information. The other modules do not use signature IDs or these response actions.
Reference:
Trend Micro Deep Security Administrator's Guide, Intrusion Prevention Events Section
NEW QUESTION # 37
Which of the following Protection Modules does not benefit from Recommendation Scans?
- A. Log Inspection
- B. Firewall
- C. Integrity Monitoring
- D. Intrusion Prevention
Answer: B
NEW QUESTION # 38
Policies in Deep Security can include a Context value. Which of the following statements re-garding Context is correct?
- A. The Context provides Deep Security Agents with location awareness and are associated with Anti-Malware and Web Reputation Rules.
- B. The Context provides Deep Security Agents with location awareness and are associated with Firewall and Intrusion Prevention Rules.
- C. The Context provides Deep Security Agents with location awareness and are associated with Log Inspection and Integrity Monitoring Rules.
- D. The Context provides Deep Security Agents with location awareness and are associated with Web Reputation Rules only.
Answer: B
Explanation:
Contexts are designed to be associated with Firewall and Intrusion Prevention Rules. If the condi-tions defined in the Context associated with a rule are met, the rule is applied. To link a security rule to a Context, go to the Options tab in the Properties window for the rule and select the Context from the menu.
Explication: Study Guide - page (165)
NEW QUESTION # 39
How does Smart Scan vary from conventional pattern-based anti-malware scanning?
- A. Smart Scan improves the capture rate for malware scanning by sending features of suspicious files to an cloud-based server where the features are compared to known malware samples.
- B. Smart Scan shifts much of the malware scanning functionality to an external Smart Protection Server.
- C. Smart Scan identifies files to be scanned based on the content of the file, not the exten-sion.
- D. Smart Scan is performed in real time, where conventional scanning must be triggered manually, or run on a schedule.
Answer: B
Explanation:
Advantages of the Smart Scan pattern over the conventional pattern protection in OfficeScan (OSCE)
NEW QUESTION # 40
Which of the following statements is true regarding Intrusion Prevention rules?
- A. Intrusion Prevention rules can detect or block traffic associated with specific applica-tions, such as Skype or file-sharing utilities.
- B. Intrusion Prevention rules check for the IP addresses of known malicious senders within a packet
- C. Intrusion Prevention rules can block unrecognized software from executing.
- D. Intrusion Prevention rules monitor the system for changes to a baseline configuration.
Answer: A
NEW QUESTION # 41
The Intrusion Prevention Protection Module is enabled and a Recommendation Scan is run to identify vulnerabilities on a Windows Server 2016 computer. How can you insure that the list of recommendations is always kept up to date?
- A. Recommendation Scans are only able to suggest Intrusion Prevention rules when the Protection Module is initially enabled.
- B. Disabling, then re-enabling the Intrusion Prevention Protection Module will trigger a new Recommendation Scan to be run. New rules will be included in the results of this new scan.
- C. Enable "Ongoing Scans" to run a recommendation scan on a regular basis. This will identify new Intrusion Prevention rules to be applied.
- D. New rules are configured to be automatically sent to Deep Security Agents when Rec-ommendation Scans are run.
Answer: C
NEW QUESTION # 42
Which of the following statements is correct regarding the policy settings displayed in the exihibit?
- A. Deep Security Agents using the displayed policy will send event details to Deep Security Manager every 5 minutes.
- B. All Deep Security Agents will send event details to Deep Security Manager every 5 minutes.
- C. Deep Security Manager will refresh the policy details on the Deep Security Agents using this policy every 5 minutes.
- D. The Heartbeat interval value displayed in this policy is inherited from the parent policy
Answer: B
NEW QUESTION # 43
Which of the following statements is true regarding Intrusion Prevention protection?
- A. Intrusion Prevention protection can only work on computers where a Deep Security Agent is installed; agentless protection is not supported.
- B. Intrusion Prevention protection can drop malicious packets but cannot reset the connection.
- C. Intrusion Prevention protection only works in conjunction with the Anti-Malware Protection Module.
- D. Intrusion Prevention protection can drop or reset a connection.
Answer: D
Explanation:
Intrusion Prevention in Deep Security can take multiple actions on malicious or suspicious network traffic, including dropping individual packets or resetting the entire network connection. These actions are configurable on a per-rule basis.
Reference:
Trend Micro Deep Security Administrator's Guide, Intrusion Prevention Actions Section
NEW QUESTION # 44
Which of the following operations makes use of the Intrusion Prevention Protection Module?
- A. Application traffic control
- B. Port scans
- C. Stateful traffic analysis
- D. Integrity scans
Answer: C
NEW QUESTION # 45
......
Deep-Security-Professional Exam Dumps - 100% Marks In Deep-Security-Professional Exam: https://exams4sure.pdftorrent.com/Deep-Security-Professional-latest-dumps.html