156-536 Harmony Endpoint Specialist - R81.20 (CCES) Practice Questions
Prepare for 156-536 with more than an answer.
- Exam fee
- $199 USD
- Level
- Specialist
- Valid for
- 3 years
Domains covered on the exam 8
- Introduction to Harmony Endpoint10%
- Harmony Endpoint Security Management15%
- Deploying Harmony Endpoint15%
- Data Security Protection15%
- Advanced Threat Prevention15%
- Large-Scale Harmony Endpoint Deployment10%
- Harmony Endpoint Management as a Service10%
- Troubleshooting10%
- 1
What GUI options do you have to access the Endpoint Security Management Server in a cloud environment? A.Infinity Portal and Web Management ConsoleB.SmartConsole and Gaia WebUIC.Nothing, there is no Cloud Support for Endpoint Management Server.D.SmartEndpoint Distributor
Show answer details
Correct answer: A
- 2
Which of the following is TRUE about the functions of Harmony Endpoint components?
Show answer details
Correct answer: B
- 3
Which Harmony Endpoint environment is better choice for companies looking for more control when deploying the product?
Show answer details
Correct answer: D
- 4
A user downloads a PDF from the internet that contains a zero-day exploit. The Harmony Endpoint agent is configured with Threat Emulation and Threat Extraction. The policy for both is set to the 'Prevent' action. What is the expected sequence of events when the user attempts to open the file?
sequenceDiagram participant User participant Endpoint Agent participant ThreatCloud participant Cleaned File User->>Endpoint Agent: Attempts to open PDF Endpoint Agent->>ThreatCloud: Sends file for analysis Note over ThreatCloud: Emulation & Extraction ThreatCloud-->>Endpoint Agent: ??? Endpoint Agent-->>User: ??? Endpoint Agent-->>Cleaned File: ???Show answer details
Correct answer: B
This describes the behavior of Threat Extraction working in tandem with Threat Emulation. To provide immediate access without risk, Threat Extraction rebuilds the file, removing any potentially malicious active content (like scripts or macros), and delivers this 'clean' version to the user instantly. Simultaneously, the original, unaltered file is sent to the ThreatCloud sandbox for full emulation to detect the zero-day exploit.
