Online Access Free 156-730 Practice Test

How can CPU Level Emulation detect ROP?

• A.Wrong order in the ROP Gadgets Dictionary.
• B.It is detected as soon as the evasion code runs and injects the malicious code into a legitimate process.
• C.Increased CPU temperature.
• D.Locate a CPU flow buffer with mismatch between called and returned addresses.

With regard to SandBlast Cloud emulation, which statement is INCORRECT?

• A.Only new files not seen before are emulated on the cloud and count against fair usage cap.
• B.For simplicity, SandBlast Cloud offers a single license SKU per User Center, covering all files sent from all gateways in that User Center.
• C.SandBlast Cloud licensing offers fair usage caps which customers should never reach.
• D.SandBlast Cloud licensing requires a license SKU per gateway.

What are the 3 stages of securing the network with the SandBlast Agent?

• A.Prevent, Contain, Block
• B.Asses, Detect, Prevent
• C.Detect, Prevent, remediate
• D.Prevent, Identify and Contain, Effective response and remediation

Can several gateways send files to one SandBlast appliance?

• A.Yes, if they are managed by the same SmartCenter/Domain.
• B.Yes, from R77.30.
• C.No, SandBlast appliance does not support HA or LB.
• D.No, only one GW can send files to a SandBlast appliance.

What are the deployment methods available with the SandBlast Agent? Choose the BEST answer.

• A.Using GPO or SCCM to deploy the deployment agent.
• B.Using both GPO or SCCM for deployment agent and End Point management to push the Agent.
• C.Using Configure SandBlast Agent to collaborate with Emulation and Ant-Virus solutions update to upgrade and install the SandBlast Agent.
• D.Manually installing on every station.