Trend Exam Deep-Security-Professional Topic 1 Question 19 Discussion

Actual exam question for Trend's Deep-Security-Professional exam

Question #: 19
Topic #: 1

[All Deep-Security-Professional Questions]

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is true?

AThe credibility scores for visited web sites will be cached. If access to the web site is re-quested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

BPackets failing the Network Packet Sanity Check will still be allowed to pass through the network engine.

CAny events generated by computers within your corporate network, as defined by an IP address range, will be ignored

DLive packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

Show Suggested Answer

Suggested Answer: D

by Meaghan at Jul 07, 2023, 09:15 PM

Limited Time Offer

25%

Off

Get Premium Deep-Security-Professional Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marylin

15 days ago

I bet the person who wrote option C was just having a 'ignore everything' kind of day. Not the best policy, if you ask me.

upvoted 0 times

...

Arlette

16 days ago

Hmm, let's see. Caching, sanity checks, ignoring events... Sounds like a fun time at the ol' network security office, eh?

upvoted 0 times

...

Floyd

27 days ago

C can't be right. Ignoring events from your own corporate network? That's just asking for trouble!

upvoted 0 times

...

Skye

29 days ago

I'm going with D. Replicating the live packet stream for analysis sounds like a good way to monitor network traffic without impacting performance.

upvoted 0 times

...

Francesco

1 months ago

B is definitely wrong. Allowing packets that fail the Network Packet Sanity Check would be a security risk, not a feature.

upvoted 0 times

Erasmo

9 days ago

D) Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

upvoted 0 times

...

Tayna

19 days ago

C) Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

upvoted 0 times

...

Alpha

20 days ago

A) The credibility scores for visited web sites will be cached. If access to the web site is requested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

upvoted 0 times

...

Shaun

2 months ago

Hmm, that's a good point. I see why D could be the correct answer as well.

upvoted 0 times

...

Carolann

2 months ago

I disagree, I believe the correct answer is D. Replicating live packet streams allows for thorough traffic analysis.

upvoted 0 times

...

Carin

2 months ago

Option A is correct. Caching credibility scores for visited websites makes sense to improve performance if the same site is accessed again within a short timeframe.

upvoted 0 times