Objective 2.22 Describe the Use and Configuration of Endpoint Checks (e.g., Registry Check, Process Check, Windows Info, Machine Cert Auth) 304 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An administrator wants to enforce that clients have antivirus software running with current definitions before accessing a sensitive application. Which APM endpoint check should be added to the access policy?

   • AFile check
   • BProcess check
   • CAntivirus check
   • DRegistry check
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An APM administrator needs to ensure that a Windows client has a specific application installed and running before granting access. Which endpoint check type should be used to verify that the application's process is active?

   • AProcess check
   • BFile check
   • CRegistry check
   • DAV check
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An administrator needs to ensure that a specific security agent is running on client machines. Which endpoint check should be used?

   • AFile check
   • BRegistry check
   • CMachine certification check
   • DProcess check
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial institution requires that only company-issued laptops, which have a machine certificate from the internal CA, can access the remote desktop portal. The certificate is stored in the local machine store. Which endpoint check should the administrator configure in the access policy?

   • AAdd a Registry check to verify the certificate thumbprint is stored in a specific registry key.
   • BAdd a Process check to verify the certificate services process is running.
   • CAdd a File check to verify the certificate file exists in the machine store directory.
   • DAdd a Machine Certification check and configure it to validate the certificate against the internal CA.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator wants to quickly add a standard set of endpoint checks (antivirus, firewall, and registry) to an access policy without manually creating each check individually. What is the most efficient approach in the APM access policy editor?

   • ACreate each endpoint check individually and add them to the policy one by one.
   • BUse the iRule editor to write a custom endpoint check script.
   • CImport a pre-configured access policy from another BIG-IP device.
   • DUse the predefined macro checks available in the access policy editor and add the 'Endpoint Security' macro.
   Reveal Solution Discussion Select an answer first