APEX ONE CERTIFIED PROFESIONAL 2023
ACTUAL EXAM 2 LATEST VERSIONS
COMPLETE QUESTIONS AND CORRECT
DETAILED ANSWERS(VERIFIED
ANSWERS)|AGRADE
VERSION A
1 What are some of the limitations of a Security Agent running in
Independent Mode? Select all that apply.
The Security Agent does not initiate scan commands from the ApexOne
Server.
The Security Agent does not accept policy settings from the ApexOne
Server.
The Security Agent does not run real-time scans.
The Security Agent denies access to shared folders.
2 Which of the following items is NOT required to enable Browser Exploit
Protection?
Advanced Protection Service
Behavior Monitoring
Web Reputation
Relevant browser plug-in installed
3 Which of the following is NOT a valid Outbreak Prevention Policy optionthat
can be configured by an administrator?
Block Ports
Deny access to executable compressed files
Limit/Deny access to shared folders
Limit/Deny access to mapped networked drives
4 Which of the following best describes Assessment Mode in Apex One?
Assessment Mode provides a trial period for evaluating Apex One
protection before requiring valid activation codes to be provided.
Assessment Mode allows administrator to maintain visibility of roaming
users even when they are not using a VPN connection into thecorporate
network.
Assessment Mode allows an administrator to evaluate items that Apex
One detects as spyware/grayware or to monitor Web site access.When
Assessment Mode is enabled, detections are logged only.
Assessment Mode provides a time period where files evaluated by
the Security Agent are submitted to the Predictive Machine Learning model.
Submissions provided while in Assessment Mode train the modelto identify
potential malware for your installation of Apex One.
5 Which of the following is NOT a task performed by the Apex One Server?
Extracts characteristics from files and submits to the SmartProtection
network for heuristic analysis.
Distributes protection settings to Security Agents.
Installs Security Agents.
Collects suspicious file samples and forwards for analysis.
6 Which of the following items can NOT be deployed using Update Agents?
Software components
Security Agents
Hotfixes
Domain settings
7 Which of the following statements regarding File Census in Apex One is
FALSE?
Census needs a Smart Protection Server (Integrated or Standalone)in order
to work
Census can check for information coming through emails
Census is dependent on Behavior Monitoring
Census can check on http and https channels
8 During the installation of the Apex One Server, the Setup Wizard displaysa port
that will be used for Apex One Server-Agent communication, as displayed in the
exhibit. How is this port assigned?
The port assignment is read from an Apex Central configuration file.
A high-numbered port is randomly assigned.
The Setup Wizard does not assign the port; you must type a portnumber
manually.
The Setup Wizard scans ports on the Apex One Server and selectsa port
that is not being used.
9 By default, how many incremental pattern updates does the Apex OneServer
make available to the Security Agents?
5
7
10
14
10 Which of the following statements are TRUE regarding Lockdown Mode inApex
One Application Control policies? Select all that apply.
When in Lockdown Mode, Apex One blocks all applications notidentified
during an inventory scan.
Applications from trusted vendors can be excluded from Lockdown.
When in Lockdown Mode, the endpoint does not permit access toany
application that do not specifically match Allow criteria.
When in Lockdown Mode, assessment mode is automaticallydisabled.
11 A new IP Address Grouping is configured as in the exhibit. The new grouping
called Lab is created, but when checking the Agent List, no Agents are displayed
in the group even though Agents do exist within theIP address range. Which of
the following events will trigger the addition ofthe Agents to the group? Select
all that apply.