ST0-303 試験問題を無料オンラインアクセス

An administrator stops the SISIPSService service.
How will this impact the agent?

• A.The agent can still communicate with the manager, but logs will fail to be uploaded
• B.The intrusion protection service is immediately stopped
• C.The intrusion protection service is stopped after reboot
• D.Agent-manager communication is stopped

What are two methods of determining which sandbox a process has been assigned to? (Select two.)

• A.Running the PSET Glossary query on the Queries tab
• B.Looking at the assigned sandbox in the policy editor
• C.Running the Policy Detail query on the Queries tab
• D.Looking at the event detail in the management console
• E.Using the agent command line configuration tool

Which action applies to prevention policies rather than detection policies?

• A.they monitor for local events that trigger actions when matched
• B.they sandbox processes proactively when executed
• C.they detect changes to files using Real-Time File Integrity Monitoring
• D.they audit changes to registry keys, files and folders

Which listening port is used, by default, on the agent for real-time notification?

• A.57
• B.2222
• C.666
• D.22

Which two queries can be utilized to create a baseline of events generated by a pilot sample of endpoints within the enterprise (including Domain Controllers, Application Servers, Mail Servers, etc.)? (Select two.)

• A.Agents OS Type
• B.Events Severity
• C.Agents Offline
• D.Agent Counts Week
• E.Agent Counts Day