Trend Exam Deep-Security-Professional Topic 1 Question 19 Discussion

Actual exam question for Trend's Deep-Security-Professional exam

Question #: 19
Topic #: 1

[All Deep-Security-Professional Questions]

The details of a policy are displayed in the exhibit. Based on these details, which of the following statements is true?

AThe credibility scores for visited web sites will be cached. If access to the web site is re-quested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

BPackets failing the Network Packet Sanity Check will still be allowed to pass through the network engine.

CAny events generated by computers within your corporate network, as defined by an IP address range, will be ignored

DLive packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

Show Suggested Answer

Suggested Answer: D

by Meaghan at Jul 07, 2023, 10:15 PM

Limited Time Offer

25%

Off

Get Premium Deep-Security-Professional Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Iluminada

2 days ago

I think option A sounds familiar, but I'm not entirely sure if the caching period is really 30 minutes.

upvoted 0 times

...

Cordelia

15 days ago

I believe the correct answer involves setting local preference for routes from AS 65517, but I'm a bit confused if it should be for passed through routes or directly attached ones.

upvoted 0 times

...

Mozell

17 days ago

This question reminds me of a practice question we did about warehouse space allocation. I feel like 15 million could be a reasonable guess.

upvoted 0 times

...

Chauncey

17 days ago

Hmm, I'm not totally sure about this one. The AppExchange has a lot of different things, right? I think A and C sound right, but I'm not 100% confident.

upvoted 0 times

...

Phung

19 days ago

I'm feeling pretty confident about this one. The XML Schema in option A looks like it should do the trick.

upvoted 0 times

...

Marylin

5 months ago

I bet the person who wrote option C was just having a 'ignore everything' kind of day. Not the best policy, if you ask me.

upvoted 0 times

...

Arlette

5 months ago

Hmm, let's see. Caching, sanity checks, ignoring events... Sounds like a fun time at the ol' network security office, eh?

upvoted 0 times

Orville

3 months ago

D) Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

upvoted 0 times

...

Domitila

3 months ago

C) Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

upvoted 0 times

...

Bonita

3 months ago

B) Packets failing the Network Packet Sanity Check will still be allowed to pass through the network engine.

upvoted 0 times

...

Venita

4 months ago

A) The credibility scores for visited web sites will be cached. If access to the web site is re-quested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

upvoted 0 times

...

Floyd

5 months ago

C can't be right. Ignoring events from your own corporate network? That's just asking for trouble!

upvoted 0 times

...

Skye

5 months ago

I'm going with D. Replicating the live packet stream for analysis sounds like a good way to monitor network traffic without impacting performance.

upvoted 0 times

Gracie

4 months ago

D does sound like a good option for monitoring network traffic without causing any performance issues.

upvoted 0 times

...

Ilona

4 months ago

I think A could also be a good choice, caching credibility scores for visited websites can help with performance.

upvoted 0 times

...

Dahlia

4 months ago

I agree, D seems like the best option for monitoring network traffic efficiently.

upvoted 0 times

...

Francesco

5 months ago

B is definitely wrong. Allowing packets that fail the Network Packet Sanity Check would be a security risk, not a feature.

upvoted 0 times

Tamekia

3 months ago

D) Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

upvoted 0 times

...

Hollis

4 months ago

C) Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

upvoted 0 times

...

Amie

4 months ago

A) The credibility scores for visited web sites will be cached. If access to the web site is requested again within 30 minutes, its credibility score will be retrieved from the cache instead of the configured Smart Protection source.

upvoted 0 times

...

Lindsey

4 months ago

D) Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

upvoted 0 times

...

Mozelle

4 months ago

C) Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

upvoted 0 times

...

Germaine

4 months ago

upvoted 0 times

...

Erasmo

4 months ago

D) Live packet streams coming through the network engine will be replicated and all traffic analysis will be performed on the replicated stream

upvoted 0 times

...

Tayna

5 months ago

C) Any events generated by computers within your corporate network, as defined by an IP address range, will be ignored

upvoted 0 times

...

Alpha

5 months ago

upvoted 0 times

...

Shaun

6 months ago

Hmm, that's a good point. I see why D could be the correct answer as well.

upvoted 0 times

...

Carolann

6 months ago

I disagree, I believe the correct answer is D. Replicating live packet streams allows for thorough traffic analysis.

upvoted 0 times

...

Carin

6 months ago

Option A is correct. Caching credibility scores for visited websites makes sense to improve performance if the same site is accessed again within a short timeframe.

upvoted 0 times