Uploads to the ESM Sever are failing.

How can the mechanism for forensic and WildFire uploads be tested from the endpoint?

A. Use BITS commands in PowerShell to send a file to the ESM Server

B. Use curl to execute a POST operation

C. Use SCP commands from a ssh client to transfer a file to the ESM Server

D. Click Check-in now in the agent console

An administrator is concerned about rogue installs of Internet Explorer. Which policy can be created to assure that Internet Explorer can only run from the \Program Files \Internet Explorer \directory?

A. An execution path policy to blacklist iexplore.exe, and whitelist entry for %programfiles%\iexplore.exe

B. An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe

C. A whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of %system% \iexplore.exe

D. An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for %programfiles%\Internet Explorer\iexplore.exe

When installing the ESM, what role must the database user be assigned in Microsoft SQL?

A. db_owner

B. db_secuirtyadmin

C. db_datawriter

D. db_accessadmin

An ESM server's SSL certificate needs two Enhanced Key Usage purposes: Client Authentication and ________________

A. Server Authentication

B. File Recovery

C. IP Security User

D. IP Security Tunnel Termination

A deployment contains some machines that are not part of the domain. The Accounting and Sales

departments are two of these.

How can a policy of WildFire notification be applied to Accounting, and a policy of WildFire prevention be

applied to Sales, while not affecting any other WildFire policies?

A. Create the rules and use the Objects tab to add Accounting and Sales to each rule they should apply to.

B. Create a condition for an application found on an Accounting machine. Use that condition for the Accounting groups rule, and create the rule tor Sales without any conditions.

C. Create two rules for WildFire: one for prevention, and one for notification. Make sure the Accounting rule is numbered higher.

D. Create group-specific registry entries on endpoints. Use these registry entries to create conditions for the WildFire rules.