EMT Practice Test

1. Question Content...

---

Question1: Based on the details of event displayed in the exhibit, which of the following statements is false?

Question2: The Security Level for Web Reputation in a policy is set to High. A server assigned this policy attempts to access a Web site with a credibility score of 78.
What is the result?

Question3: A collection of servers protected by Deep Security do not have Internet access. How can Smart Scan be used on these computers.

Question4: An administrator attempts to activate the Deep Security Agent installed on a server by typing the following command in the Command Prompt on the Deep Security Agent computer:
dsa_control -a dsm://server1.acme.com:4120
The Agent does not activate as expected. What is a valid reason for this issue?

Question5: Which of the following is not an operation that is performed when network traffic is intercepted by the network driver on the Deep Security Agent?

Question6: The Intrusion Prevention Protection Module is enabled, but the traffic it is trying to analyze is encrypted through https. How is it possible for the Intrusion Prevention Protection Module to monitor this encrypted traffic against the assigned rules?

Question7: Which of the following Protection Modules does not benefit from Recommendation Scans?

Question8: A Deep Security administrator wishes to monitor a Windows SQL Server database and be alerted of any critical events which may occur on that server. How can this be achieved using Deep Security?

Question9: Based on the script displayed in the exhibit, which of the following statements are correct? Select all that apply.

Question10: Which of the following is NOT an operation that can be performed on Deep Security resources using the API?

Question11: Which of the following file types would not be evaluated by the Application Control Protection Module?

Question12: Which of the following statements is correct regarding the policy settings displayed in the exihibit?

Question13: Which Deep Security Protection Modules can be used to provide runtime protection for the Kubernetes and Docker platforms? Select all that apply.

Question14: The details for an event are displayed in the exhibit. Based on these details, which Protection Module generated the event?

Question15: Which of the following statements is true regarding Firewall Rules?

Question16: Which of the following statements is false regarding the Log Inspection Protection Module?

Question17: What is the role of Apex Central in the Connected Threat Defense infrastructure?

Question18: The Overrides settings for a computer are displayed in the exhibit. Which of the following statements is true regarding the displayed configuration?

Question19: The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is true?

Question20: In the policy displayed in the exhibit, the state of the Web Reputation Protection Module is set to "Inherited (On)", while the state for the other Protection Module is set to "On". Why is the Web Reputation Protection Module displayed differently than the other Protection Modules.

Question21: What is the default priority assigned to Firewall rules using the Allow action?

Question22: Multi-tenancy is enabled in Deep Security and new tenants are created. Where does the new tenant data get stored when using SQL Server as the Deep Security database?

Question23: Based on the policy configuration displayed in the exhibit, which of the following statements is true?

Question24: Which of the following correctly identifies the order of the steps used by the Web Reputation Protection Module to determine if access to a web site should be allowed?

Question25: Based on the Malware Scan Configuration displayed in the exhibit, which of the following statements is false.

Question26: The details for an event are displayed in the exhibit. Based on these details, which Protection Module generated the event?

Question27: Which of the following are valid methods for forwarding Event information from Deep Secu-rity? Select all that apply.