AA 1-Apex One Certified Professional Exam graded 2023

Which of the following must be configured before taking advantage of the Unmanaged Endpoints feature in Apex One? ¿Cuál de los siguientes debe configurarse antes de aprovechar la función de puntos finales no administrados en Apex One? The Trace Route Scope must be configured. The Active Directory/IP Scope must be configured. The Agent Tree Scope must be configured. The Port Range Scope must be configured. 2 An Apex One Firewall Policy is created, but not a Firewall Profile. What behavior can you expect for the Apex One Firewall? Se crea una Política de Apex One Firewall, pero no un Perfil de Firewall. ¿Qué comportamiento puede esperar para el Apex One Firewall? If a Firewall Profile is not created, the policy setting will be applied automatically to the most recently created profile. If a Firewall Profile is not created, the policy settings will be applied automatically to all Security Agents. If a Firewall Profile is not created, the policy settings will not be applied to the Security Agents. If a Firewall Profile is not created, the policy settings will only apply to the local computer on which it was created. 3 Which of the following statements regarding the Newly Encountered Programs feature of Behavior Monitoring is FALSE? ¿Cuál de las siguientes afirmaciones con respecto a la función de Programas recientemente encontrados de Monitoreo de comportamiento es FALSA? The Newly Encountered Program feature requires Real-Time Scan and Web Reputation be enabled. Behavior Monitoring scans HTTP, HTTPS and email for programs with low prevalence or maturity. End users can be prompted to allow programs with low prevalence or maturity. Applications can be added to a white list to bypass the New Encountered Programs feature. This will allow programs to execute regardless of their prevalence and maturity. 4 Which of the following Security Agent deployment methods allows you to select the Scan Mode for the Agent as part of the setup? ¿Cuál de los siguientes métodos de implementación del Agente de seguridad le permite seleccionar el Modo de escaneo para el Agente como parte de la configuración? Web install Remote install Logon script Security Agent Packager 5 Which of the following best describes Assessment Mode in Apex One? ¿Cuál de las siguientes opciones describe mejor el modo de evaluación en Apex One? Assessment Mode provides a time period where files evaluated by the Security Agent are submitted to the Predictive Machine Learning model. Submissions provided while in Assessment Mode train the model to identify potential malware for your installation of Apex One. Assessment Mode allows an administrator to evaluate items that Apex One detects as spyware/grayware or to monitor Web site access. When Assessment Mode is enabled, detections are logged only. Assessment Mode allows administrator to maintain visibility of roaming users even when they are not using a VPN connection into the corporate network. Assessment Mode provides a trial period for evaluating Apex One protection before requiring valid activation codes to be provided. 6 An administrator is responsible for deploying Security Agents on endpoint computers within their organization. They attempt to download an Apex One Security Agent installation package from Apex Central and they note that an available Installation Mode option for the Agent is Coexist Mode, as shown in the exhibit. Which of the following answers best describes Coexist Mode? Un administrador es responsable de implementar Agentes de seguridad en las computadoras de punto final dentro de su organización. Intentan descargar un paquete de instalación de Apex One Security Agent de Apex Central y observan que una opción de Modo de instalación disponible para el Agente es el Modo Coexistir, como se muestra en la exposición. ¿Cuál de las siguientes respuestas describe mejor el modo Coexistir? Coexist Mode allows third-party security products to be used on the endpoint computer in addition to Apex One. In this mode, Apex One can be used to supplement security features not provided by the other vendor. Coexist mode allows third-party security applications to store their event data in the Apex One Server database. This allows Apex One administrators to view all events details generated on the endpoint, regardless of the source, from within the Apex One Web Management console. Coexist mode allows a Security Agent to be installed on the same computer as the Apex One Server. Coexist mode allows multiple Trend Micro Security Agents to be installed on the same endpoint computer, for example, Apex One can be used for Anti-Malware and Web Reputation protection and Deep Security can be used for Integrity Monitoring protection. 7 Which of the following statements is FALSE regarding Apex One heartbeat events? ¿Cuál de las siguientes afirmaciones es FALSA con respecto a los eventos de latidos de Apex One? Heartbeats are used to confirm that the connection between the Security Agent and the Server remains functional. Heartbeats address the issue of Security Agents in unreachable networks appearing offline even when they can connect to the Apex One Server If the Apex One Server does not receive a message from a Security Agent within the defined heartbeat value, it will immediately treat the Agent as offline. Heartbeats are real-time messages that Security Agents send to the Server over HTTP/TCP. 8 What is the role of the Reference Server configuration as displayed in the exhibit? Security Agents use this configuration to identify alternate update sources. If an Agent is unable to contact the Primary Update Source, it will attempt to connect to the Reference Server. Security Agents use this configuration to determine which policy or profile to use. If a Security Agent can not connect to the server listed in this configuration, the Agent status becomes offline and the policy or profile for external agents is used. Security Agents use this configuration to determine whether they should connect directly to the Apex One Server or to the Edge Relay Server. In the Reference Server window, provide the details of the Edge Relay Server and port number. Security Agents use this configuration to identify secondary Apex One Servers. When a Security Agent needs to be moved from one Server to another, the servers listed as Reference Servers will be available as destination choices in the Move Agent window. 9 Which of the following Apex One features are enabled by integrating with Microsoft Active Directory? Select all the answers that apply. ¿Cuál de las siguientes características de Apex One se habilita al integrarse con Microsoft Active Directory? Seleccione todas las respuestas que correspondan. Apex One can query Active Directory to locate endpoints computers without Security Agents installed. Administrative capabilities in the Apex One Web Management console can assigned to Active Directory accounts. Apex One can query Active Directory to identify endpoint using third-party security software and target them for uninstallation. Active Directory can be used to automatically group agents based on an Active Directory domain and map them to domains in the Apex One Security Agent tree. 10 Which of the following correctly describes the method of deploying an Apex One Edge Relay Server? From the target server, run the Edge Relay Server setup application obtained from the Apex One Server. Run the Edge Relay Server setup application on the Apex One Server and specify the IP address of the target server when prompted. Click "Enable Apex One Edge Relay Server" under the Administration Settings in the Apex One Web Management console. Click "Enable Apex One Edge Relay Server" during the Apex One Setup Wizard. 11 An Apex One administrator is defined using their Active Directory account for authentication. The administrator forgets their password. How can the administrator reset their password in Apex One? Un administrador de Apex One se define utilizando su cuenta de Active Directory para la autenticación. El administrador olvida su contraseña. ¿Cómo puede el administrador restablecer su contraseña en Apex One? The administrator should edit the password entry in the O file. The administrator should edit the password entry in the TrendA file. The Active Directory password cannot be reset through Apex One. The administrator should edit the password entry in the TrendAuthD file 12 A new IP Address Grouping is configured as in the exhibit. The new grouping called Lab is created, but when checking the Agent List, no Agents are displayed in the group even though Agents do exist within the IP address range. Which of the following events will trigger the addition of the Agents to the group? Select all that apply. Una nueva agrupación de direcciones IP se configura como en la exposición. Se crea la nueva agrupación llamada Lab, pero cuando se verifica la Lista de agentes, no se muestran agentes en el grupo a pesar de que existen agentes dentro del rango de direcciones IP. ¿Cuál de los siguientes eventos activará la adición de los Agentes al grupo? Seleccione todas las que correspondan. Agents will be added to the group when their connection status changes from offline to online. Agents will be added to the group when the administrator runs the Sort Client operation. Agents will be added to the group when they register to the Server for the first time. Agents must be added to the group manually. 13 Which of the following items is NOT required to enable Browser Exploit Protection? Relevant browser plug-in installed Behavior Monitoring Web Reputation Advanced Protection Service 14 A Security Agent installation package is created using the Agent Packager utility. In environments with multiple Apex One Servers, how do you specify which of these Servers the Agents installed using the package will report back to? Se crea un paquete de instalación de Security Agent utilizando la utilidad Agent Packager. En entornos con múltiples servidores Apex One, ¿cómo se especifica a cuál de estos servidores informarán los agentes instalados utilizando el paquete? Security Agents installed using the Agent package report back to the Server on which the package was created. There is no need to identify which Server the Agent will report to as all the Apex One Servers share a single database. When the Security Agent installation package is run on the endpoint computer, the user will be prompted to identify the Server to which it will report. The Agent Packager utility interface includes a field to identify the hostname of the Server that Agents installed using the package will report to. 15 The settings for an endpoint computer enables pre-execution Predictive Machine Learning using the Apex One Security Agent. The computer, however, does not have an Internet connection to submit the file features to the Machine Learning model on the Smart Protection Network. How can this endpoint benefit from Machine Learning scans when it can not reach the Internet? Select all that apply. La configuración de una computadora de punto final permite el aprendizaje automático predictivo previo a la ejecución con el agente de seguridad Apex One. Sin embargo, la computadora no tiene una conexión a Internet para enviar las características del archivo al modelo de Machine Learning en la Red de Protección Inteligente. ¿Cómo puede este punto final beneficiarse de los escaneos de Machine Learning cuando no puede llegar a Internet? Seleccione todas las que correspondan. Predictive Machine Learning requires a connection to the Internet to function. Without an Internet connection on the endpoint, this type of scan is skipped. The endpoint has access to a Predictive Machine Learning Local File Model which allows pre-execution Predictive Machine Learning scans to be performed locally when there is no Internet connection. Predictive Machine Learning scans can performed by a local Smart Protection Server. The Smart Protection Server updates its version of the Machine Learning Model regularly to ensure it is always up to date. The environment can be configured so that Machine Learning requests are performed through a local Smart Protection Server on the network. In this scenario, the Smart Protection Server proxies to submission of the file features to the Smart Protection Network. 16 Security Agents can be grouped automatically by which of the following methods? By Active Directory domain By operating system version By Security Agent version By MAC address 17 Which of the following is a valid method for moving a registered Security Agent to a different Apex One Server? Run the Apex One Update Agent utility and identify the details of the new Apex One Server. Open the Security Agent console and specify the new Apex One Server location. Run the Server Tuner tool and identify the name of the Agent to be moved and the details of the new Apex One Server. In the Apex One Web Management console, click Agents Agent Management and select the Agent to be moved. Click Manage Agent Tree Move Agent