Trend Deep-Security-Professional Exam - Topic 1 Question 54 Discussion

Actual exam question for Trend's Deep-Security-Professional exam

Question #: 54
Topic #: 1

[All Deep-Security-Professional Questions]

Which of the following are valid methods for pre-approving software updates to prevent Ap-plication Control Events from being triggered by the execution of the modified software? Select all that apply.

AOnce the inventory scan has run when Application Control is first enabled, there is no way to update the inventory to incorporate modified software.

BSoftware updates performed by a Trusted Updater will be automatically approved.

CEdit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

DMaintenance mode can be enabled while completing the updates.

Show Suggested Answer

Suggested Answer: D

Recommendation Scans can suggest rules for the following Protection Modules:

* Intrusion Prevention

* Integrity Monitoring

* Log Inspection

Explication: Study Guide - page (161)

by Shawna at Jan 27, 2025, 07:43 PM

Limited Time Offer

25%

Off

Get Premium Deep-Security-Professional Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Benton

3 months ago

Wait, can we really edit AC.db? That feels off.

upvoted 0 times

...

Henriette

3 months ago

D is a good practice, maintenance mode helps a lot!

upvoted 0 times

...

Precious

3 months ago

C sounds risky, editing the database directly?

upvoted 0 times

...

Wendell

4 months ago

A seems wrong, you can update the inventory.

upvoted 0 times

...

Valentine

4 months ago

B is definitely valid, trusted updaters are key!

upvoted 0 times

...

Domonique

4 months ago

I vaguely recall that once the inventory scan is done, it can't be updated, which makes A sound plausible.

upvoted 0 times

...

Man

4 months ago

I practiced a similar question where maintenance mode was mentioned, so I think D could be a valid option here.

upvoted 0 times

...

Jade

4 months ago

I'm not entirely sure, but I feel like editing the AC.db file could lead to issues. It seems risky.

upvoted 0 times

...

Rosamond

5 months ago

I remember something about Trusted Updater automatically approving updates, so I think B might be correct.

upvoted 0 times

...

Ula

5 months ago

Ah, I see what they're getting at. Maintenance mode and Trusted Updater seem like the obvious choices, but I'll double-check the other options just to be sure.

upvoted 0 times

...

Laine

5 months ago

This is a good opportunity to demonstrate my knowledge of Application Control. I'm feeling confident I can select the correct answers here.

upvoted 0 times

...

Ilda

5 months ago

Okay, I think I've got a handle on this. The key is to identify the valid methods for pre-approving updates to prevent Application Control events. Let me go through the options systematically.

upvoted 0 times

...

Destiny

5 months ago

Hmm, I'm a bit confused by the wording here. I'll need to make sure I understand the concepts of Application Control and pre-approving software updates before I can confidently select the right answers.

upvoted 0 times

...

Allene

5 months ago

This looks like a tricky question on Application Control. I'll need to carefully read through the options and think about the implications of each one.

upvoted 0 times

...

Azzie

10 months ago

I hear the Deep Security Agent has been working out - gotta keep those Application Control Events in check!

upvoted 0 times

Pearly

10 months ago

D) Maintenance mode can be enabled while completing the updates.

upvoted 0 times

...

Pearly

10 months ago

C) Edit the inventory database file (AC.db) on the Agent computer to include the hash of the newly updated software. Save the change and restart the Deep Security Agent. The software updates will now be approved.

upvoted 0 times

...