500-275 Online Practice Questions and Answers

Which statement describes an advantage of the FireAMP product?

A. Signatures are pushed to endpoints more quickly than other antivirus products.

B. Superior detection algorithms on the endpoint limit the amount of work the cloud must perform.

C. It provides enterprise visibility.

D. It relies on sandboxing.

Which feature allows retrospective detection?

A. Total Recall

B. Cloud Recall

C. Recall Alert

D. Recall Analysis

How does application blocking enhance security?

A. It identifies and logs usage.

B. It tracks application abuse.

C. It deletes identified applications.

D. It blocks vulnerable applications from running, until they are patched.

Which type of activity is shown in the Device Trajectory page?

A. the IP addresses of hosts on which a file was seen

B. the activity of the FireAMP console users

C. the hosts that are in the same group as the selected host

D. file creation

In a FireAMP Private Cloud installation, deployed connectors communicate with which server?

A. opadmin..com

B. console..com

C. cloud..com

D. aws..com

For connector-to-FireAMP Private Cloud communication, which port number is used for lower- overhead communication?

A. 22

B. 80

C. 443

D. 32137

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy?

A. Audit Log

B. Users

C. Applications

D. Business

Which statement about two-step authentication is true?

A. It is the ability to use two separate passwords.

B. It is the ability to enable biometric authentication.

C. It is the ability to have a passphrase sent to a mobile device.

D. It is the ability to use a verification code in conjunction with the correct username and password.

Which of these can you use for two-step authentication?

A. the Apple Authenticator app

B. the Google Authenticator app

C. a SecurID token

D. any RFC 1918 compatible application

Where is the File Fetch context menu option available?

A. anywhere a filename or SHA-256 hash is displayed

B. only from the Filter Event View page

C. from the Audit Event page

D. from the configuration in the Business Defaults page