By default, where are log entries for the ESM Server and the ESM Console stored?A . In XML-formatted text files on the serverB . In flat text files on the serverC . In a...
Which two statements about file hashes are true? (Choose two.)A . WildFire populates ESM Server's cache with hashes of files known from other customers to be malicious.B . The Traps agent caches the hashes...
Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.)A . A common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.B...
Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)A . Application data files that trigger preventionsB . Executables with no previous verdict in the ESM deploymentC . Executables with...
Which three statements about the trusted publisher mechanism are true? (Choose three.)A . The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.B . The list of trusted publishers...
What does ROP stand for?A . Return-Oriented ProgrammingB . Rules of PreventionC . Restriction on ProcessD . Retained Original ProcessView AnswerAnswer: A
The administrator uses Restrictions to do what in the ESM Console?A . restrict which processes will be protected by which EPMs.B . restrict the execution of executable files.C . restrict which administrators can set...
Which statement about Malware verdicts is true?A . If WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict...
The Traps product and documentation use the terms "malware" and "exploit" in a very specific way. Which two statements are true? (Choose two.)A . Exploits attempt to take advantage of a vulnerability in code.B...
What are two ways to prevent exploits? (Choose two.)A . Return-Oriented ProgrammingB . Address Space Layout RandomizationC . Heap SprayD . Anti-Spyware Location and RemovalE . Retained Original ProcessF . Buffer OverflowG . Data...
