AA- Day2 Flashcards by jay bit | Brainscape

Q

Visibility with SPAN and DHCP

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Device Profile Library (DPL) & Device Classification Engine (DCE) Purpose

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Classification

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria : Authentication Events

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria: Events

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria: Track changes

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria: User Directory

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria: Other Device Information 1

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Advanced Criteria: Other Device Information 2

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Quiz

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Criteria Logic

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Add to List

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Whitelisting and Blacklisting

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Commonly Misconfigured Criteria

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Scripts as Actions

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Reasons for Irresolvable Criteria

A

Non existent property for the endpoint

> Testing for a windows property on non-windows devices

> Looking for a property on an unmanaged device such as a security camera

Inability to access the endpoint due to

> Network issues

> Incorrect credentials

Endpoint is outside of the deployment’s IP Assignments
Endpoint is not part of the Internal Network

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Setting Counters

A

This Counters action is helpful for policy testing and enforcement

Example: On 1^st incident of matching AV not updated we send a notification. On the 2^nd incident of matching we block or quarantine the device.

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

“ACtion” Scheduling

A

scheduling an action is useful when e.g. you run muliple scripts and you need to run them after each other and not all at the same time

Q

Key Policy Errors to Avoid

A

Q

Quiz

A

Q

Quiz

A

Q

FLEXX Lincesing Model

A

Q

Resilience and HA Licensing

A

Q

Options to transition to FLEXX Licensing

A

Hardware Refresh
Upgrade
Migrate

Q

Upgrade Preperation (for Licensing to FLEXX migration)

A

Q

ForeScout Upgrade:

From Gui
From CLI

A

Q

Module Licensing when Upgrading

A

Q

Migrating to FLEXX licensing - Steps

A

Q

Quizz

A

Q

Quizz

A

Q

Extended Modules - Notes

A

Q

Available Module Categories

A

Advanced Threat Protection (ATD)
Endpoint Protection Platform (EPP)
Mobile Device Management (MDM)
Open Integration Module (OIM):data exchange
Security Information and Event Management (SIEM)
Vulnerability Management (VM)
Privileged Access Management (PAM)
IT SErvice Management (ITSM)
Next Generation Firewall (NGFW)
Client Management Tool (CMT)

Q

Extended Modules - Deployment steps (1)

A

Q

Extended Modules - Deployment steps (2)

A

Q

quizz

A

Q

Backups - System Components

A

Q

Backup - One Time

A

Q

Backups - Scheduled Automatic (1/3): Configure Backup Server

A

Q

Backups - Scheduled Automatic (2/3): Configure Encryption Password

A

Q

Backups - Scheduled Automatic (3/3): Set Schedule and back up parameters

A

Q

Backups - Restorin a System Backup

A

Q

Backup Restore - EM Component (1/2)

A

Q

Backup Restore - EM Component (2/2)

A