CheckPoint Check Point Accredited Sandblast Administrator - 156-730 Exam Practice Test
A Threat Extraction license is always bundled with Threat Emulation.
Correct Answer: B
Vote an answer
You analyze your Threat Prevention events in SmartEvent and there is one specific event with a PDF-document you suspect being malicious. What is a typical behavior Threat
Emulation would detect as malicious? When the PDF is opened in VM:
Emulation would detect as malicious? When the PDF is opened in VM:
Correct Answer: C
Vote an answer
Anti-Bot uses the following detection/prevention features:
1 . Reputation lookup of DNS/IP/URL access
2 . Dynamic analysis for Bots
3. Outbound SPAM
4. Bot behavior signatures
1 . Reputation lookup of DNS/IP/URL access
2 . Dynamic analysis for Bots
3. Outbound SPAM
4. Bot behavior signatures
Correct Answer: A
Vote an answer
What are the given options for remediation?
1 . Remediation script
2 . Auto remediation
3 . Using Threat Emulation to block and remove the infected file
4 . Use the locally installed Anti-Virus to perform a complete system scan
1 . Remediation script
2 . Auto remediation
3 . Using Threat Emulation to block and remove the infected file
4 . Use the locally installed Anti-Virus to perform a complete system scan
Correct Answer: D
Vote an answer