Progress

49 / 50
98%
1. Which components of Kaspersky Endpoint Security for Windows
CANNOT be installed on a server operating system? (select 3
answers)You have reached the max number of allowed answers

Adaptive Anomaly Control

Behavior Detection

Host Intrusion Prevention

Device Control

AMSI Protection Provider

Application Control
2. On which operating systems can Kaspersky Security Center 13
Administration Server be installed? (select 5 answers)You have
reached the max number of allowed answers

Windows Server 2008

Windows Server 2008 R2

Windows 10

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

3. Which tasks and policies does the Quick Start Wizard create on
the Administration Server if it is started from the Web Console?
(select 3 answers)You have reached the max number of allowed answers

Kaspersky Security Center 13 Network Agent policy

Kaspersky Endpoint Security for Windows (11.6.0) policy

Kaspersky Endpoint Security for Windows (11.6.0) out-of-office policy

Virus Scan task of Kaspersky Endpoint Security 11.6 for Windows

 Update rollback task of Kaspersky Endpoint Security 11.6 for Windows

Find vulnerabilities and required updates task of Network Agent

Update task of Kaspersky Endpoint Security 11.6 for Windows

4. On which Windows Server 2012 editions can Kaspersky Security
Center 13 Administration Server be installed? (select 4 answers)You
have reached the max number of allowed answers

Foundation edition

Essentials edition

Standard edition

Datacenter edition

None of the above

5. Installation on which of the following virtual platforms does
Kaspersky Endpoint Security 11.6 for Windows support? (select 5
answers)You have reached the max number of allowed answers

VMware ESXi

Microsoft Hyper-V

Citrix Provisioning Services

VMware Workstation

Oracle VM VirtualBox

Citrix XenDesktop

KVM
6. Which of the following virtual platforms does Kaspersky Security
Center 13 NOT support? (select 4 answers)You have reached the max
number of allowed answers

Citrix XenServer

Microsoft Hyper-V Server

KVM
 Red Hat Virtualization

Parallels Desktop

Proxmox VE

Nutanix AOS
7. The administrator plans to use SNMP protocol to monitor status
and receive notifications from the Administration Server. However,
the SNMP agent component is missing from the list of
Administration Server components in the installation wizard. Why?

SNMP agent is an Administration Console component, not a Server

component

SNMP agent is not displayed if the SNMP service (a component of

Windows operating system) is not installed on the computer

SNMP agent is always installed, it does not need to be selected as an

option

The SNMP agent component has a separate installer

8. You want to publish installation packages in Active Directory via
Kaspersky Security Center 13 Administration Server. Which
packages can be published this way?

Any packages available in the Installation packages repository

Packages of Kaspersky products only

Only Kaspersky Network Agent packages

None
9. What does a closed lock mean near a parameter in a group policy
of Kaspersky Endpoint Security? (select 2 answers)

This parameter cannot be changed in the local interface of Kaspersky

Endpoint Security

This parameter is password-protected

This parameter can be changed only by the administrator who created

the policy
 This parameter cannot be changed in the subgroups’ policies (unless
inheritance is disabled)
10. When configuring a stand-alone installation package of
Kaspersky Endpoint Security 11.6 for Windows for computers that
do not have access to the network, how would you include custom
protection settings into the package?

Export the policy of Kaspersky Endpoint Security 11.6 for Windows with
the necessary settings to a file and copy this file into the folder that contains
the stand-alone installation package files

Export settings from the local Kaspersky Endpoint Security interface and
copy this file into the folder where the stand-alone package is located

Export settings from the local Kaspersky Endpoint Security interface and
specify this file as the configuration file in the properties of the regular
installation package prior to creating a stand-alone package

Export the policy of Kaspersky Endpoint Security 11.6 for Windows with
the configured settings and specify this file as the configuration file in the
properties of the regular installation package prior to creating a stand-alone
package
11. Which certificate does Kaspersky Security Center 13
Administration Server use for encrypted connections with Kaspersky
Network Agents?

Kaspersky certificate

The Administration Server does not encrypt connections with Network

Agents

The certificate automatically generated during the Administration Server

installation

The certificate specified by the administrator during the Administration

Server installation
12. Which of the following remote installation methods can be used
in the Install Application remotely task in Kaspersky Security Center
13 when the Network Agent is not selected to be deployed? (select 2
answers)You have reached the max number of allowed answers

Using Group Policy Objects (GPO) in the Active Directory

Using Network Agent

 Using operating system tools: shared folders and remote procedure call
(RPC)

Using Logon Scripts in the Active Directory

13. How many concurrent active policies of Kaspersky Endpoint
Security 11.6 for Windows can there be within a single group?

2 at most

As many as you want

14. Which settings can be edited in the policy of group B? (select 2
answers)
There is group A with a policy of Kaspersky Endpoint Security 11.6 for
Windows Group A has subgroup B, which also contains a policy of Kaspersky
Endpoint Security 11.6 for Windows.

Any

Only those parameters that are NOT locked in the policy of group A

Only those parameters that are locked in the policy of group A

Any, if the option Inherit settings from upper-level policy is disabled in the
policy of group B
15. ABC Inc. plans to deploy Kaspersky Endpoint Security on 10000
endpoints and manage protection through one Administration
Server. Which database server is recommended for Kaspersky
Security Center in this case?

Microsoft SQL Server Standard

MySQL Enterprise Edition

Microsoft SQL Server Express

MySQL Community Edition

16. Which component is NOT available in Kaspersky Endpoint
Security 11.6 for Windows?
 Firewall

Full Disk Encryption

File and Folder Backup

Device Control
17. Which functionality of Kaspersky Security Center is NOT
available under the KESB Select license?

Mobile device management

Control Components Management

Protection Components Management

Vulnerability and Patch Management

18. Which of the following installation methods does NOT work if the
computer is NOT on the domain?

Remote deployment using Windows resources

Installation using Network Agent

Remote installation using Active Directory

Installation from a stand-alone package

19. The administrator has selected to Assign Network Agent
installation in the Active Directory group policies in the remote
installation task. How will the Network Agent installation files get
on the computer?

Computers will receive them from the domain controller together with the
Active Directory group policy

The Administration Server will copy the files to the computers’ temporary
folders over the network beforehand

Computers will download them from the shared folder on the domain
controller

Computers will download them from the shared folder on the

Administration Server
20. How to make the package also install the BadUSB Attack
Prevention component?
There is a stand-alone package on the Administration Server that installs
Kaspersky Endpoint Security with the default set of components.

Open the properties of the stand-alone package in the Administration

Console and select the necessary component

Open the folder where the stand-alone package is located and edit the
installation string in the .kud file

Open the folder where the stand-alone package is located and edit the list
of components in the .kud file

Select the component in the original Kaspersky Endpoint Security

package and re-create the stand-alone package
21. Where does the MMC console show when the Administration
Server last polled the network to discover computers?

In the properties of the Unassigned devices node

In the Administration Server events

In the properties of the Advanced | Network poll node

In the properties of the Administration Server node (Advanced |

Administration Server operation statistics)
22. You want to organize computers into groups to be able to
specify different protection parameters for them. In which node of
Kaspersky Security Center console are such groups to be created?

Device selections

Policies

Unassigned devices

Managed devices
23. Which of the following are Kaspersky Security Center tasks?
(select 2 answers)You have reached the max number of allowed answers

Perform Windows Update synchronization

Change Administration group

 Change Administration Server

Synchronize Active Directory structure

24. Which permission is to be given to a trusted process in Trusted
zone of Kaspersky Endpoint Security to make File Threat Protection
NOT scan files the process accesses?

Do not scan opened files

Do not monitor application activity

Do not block interaction with the application interface

Special permissions are not necessary, File Threat Protection does not
scan any files accessed by trusted processes
25. The network is protected with Kaspersky Endpoint Security 11.6
and managed with Kaspersky Security Center 13. Can you make the
system drive to be scanned for viruses only when the computer is
not used, meaning, when it is locked or the screensaver is on?

Yes, you can select the checkbox Suspend scheduled scanning when the
screensaver is off and the computer is unlocked in the Kaspersky Endpoint
Security policy

No

Yes, you can select the checkbox Enable background scan in the
Kaspersky Endpoint Security policy

Yes, you can create a virus scan task for the system drive and select the
checkbox Scan only when the computer is idling in its properties
26. Which component of Kaspersky Endpoint Security 11.6 for
Windows analyzes the behavior of already running executable files
to detect malware activity?

Host Intrusion Prevention

Network Threat Protection

Behavior Detection

Kaspersky Security Network

27. Which of the following protocols can be specified in the Firewall
rules in Kaspersky Endpoint Security 11.6 for Windows? (select 3
answers)You have reached the max number of allowed answers

ARP

TCP

SMTP

ICMP

SNMP

UDP
28. Consider Kaspersky Endpoint Security 11.6 for Windows. When
the Behavior Detection component recognizes dangerous activities,
which of the following actions can it take? (select 2 answers)You
have reached the max number of allowed answers

Disinfect

Delete the file

Quarantine the file

Terminate the program

29. What is the purpose of virus scan tasks, if File Threat Protection
is permanently running on the computers with the default settings?
(select 3 answers)You have reached the max number of allowed answers

They scan disk boot sectors

They scan files on removable and network drives

They scan files of all formats, and thus decrease the risk of spreading
infected files inadvertently

They scan files within archives, and thus decrease the risk of spreading
infected files inadvertently
30. Select the correct statements about Web Threat Protection of
Kaspersky Endpoint Security: (select 3 answers)You have reached the
max number of allowed answers
 It scans data in outbound connections

It scans data in secure connections (SSL/TLS)

It scans HTTP and FTP protocols

It scans data in inbound connections established from outside

31. What does the Firewall do with a packet if cannot find a
matching rule for it neither among packet rules, nor among rules for
applications?

Allows

The Firewall can always find a matching rule for a packet

Prompts the user

Blocks
32. Which connections are High Restricted applications prohibited
from establishing in Trusted networks under the default settings?

None

All

DNS, email, remote desktop connections, and ICMP protocol

DNS requests and connections over mail protocols

33. Under which conditions does Kaspersky Endpoint Security switch
to the out-of-office mode if Network Agent is configured to Enable
out-of-office mode when Administration Server is not available?

After an unsuccessful synchronization with the Administration Server

After an unsuccessful synchronization, if the client computer does not

receive an answer to the command ping <Administration Server address>

After an unsuccessful synchronization, if the client computer cannot

resolve the Administration Server name

After three unsuccessful synchronizations with the Administration Server

or after all networks have been disconnected
34. What happens when the cloud mode is enabled for the
protection components?

When the cloud mode is enabled for the protection components,

Kaspersky Endpoint Security uses a lite version of anti-virus databases, but
sends more requests to the KSN cloud

When the cloud mode is enabled for the protection components,

Kaspersky Endpoint Security can send executable and non-executable files or
their parts to the KSN cloud

When the cloud mode is enabled for the protection components,

Kaspersky Endpoint Security sends more statistical information to the KSN
cloud and uses the full version of anti-virus databases
35. Which parameters do you need to disable in the policy to stop
Kaspersky Endpoint Security from sending extended statistical
information and files or their parts to the KSN cloud?

Extended KSN mode

Kaspersky Security Network

Use of KSN Proxy

Cloud mode
36. Which of the following components of Kaspersky Endpoint
Security for Windows provides proactive defense against unknown
threats by analyzing the sequence of actions performed by
a program?

AMSI Protection Provider

Behavior Detection

Host Intrusion Prevention

37. How does Kaspersky Endpoint Security 11.6 for Windows protect
against file-encrypting ransomware? (select 2 answers)

It generates bitcoin cryptocurrency for the ransom in the background

It backs up documents and if a document gets encrypted by malware, it

restores it from a backup copy
 It automatically brute-forces the key and decrypts the encrypted
documents

It heuristically detects encryption attempts and blocks malware38. A

computer running Windows 2012 Server is protected with Kaspersky
Endpoint Security 11.6 for Windows with the default settings. The
administrator wants to use it as a print server, but no prints are
being successful. What would be the reason for this?

Application Control blocks the start of the print server program

The printer is blocked by Device Control

Firewall blocks network activity of the print server

Host Intrusion Prevention blocks the main process of the print server
39. Which of the listed below is a known limitation of the Web
Control component in Kaspersky Endpoint Security 11.6 for
Windows?

It can’t block content by data type over an https connection

Can’t block any website, accessed over an https connection

It works only with the mainstream web browsers, such as Internet

Explorer, Mozilla Firefox, Google Chrome

None of the above

40. Consider Kaspersky Security Center 13. The administrator
selected the Path to folder parameter as a condition for an
application category and specified the C:\Program Files\Microsoft\
value. Which executable files will meet this condition?

The files whose checksums coincide with the checksums of the files that
were located in folder С:\Program Files\Microsoft\ on the Administration
Server when the category was being created

The files whose path begins with С:\Program Files\Microsoft\

The files whose metadata coincides with the metadata of a file located in
С:\Program Files\Microsoft\ on the Administration Server

The files whose checksums coincide with the checksums of the files
located in С:\Program Files\Microsoft\ on the Administration Server. Every
time the Admin Server is restarted, the list of checksums is updated to
reflect the current folder contents
41. Which resources, when blocked by the control components of
Kaspersky Endpoint Security 11 for Windows, can be temporarily
allowed with the help of a special access key provided by the
administrator?

Devices

None of the above

Web resources

Applications
42. Which components of Kaspersky Endpoint Security for Windows
can request information from KSN? (select 3 answers)You have
reached the max number of allowed answers

Application Control

Device Control

Web Control

Host Intrusion Prevention

43. How should the administrator fix this?
The administrator wants to configure Device Control settings in the policy of
Kaspersky Endpoint Security 11.6 for Windows, but the control options are
not displayed in the policy in the MMC console.

Load a Kaspersky Endpoint Security for Business Select license into

Kaspersky Security Center

Open the interface settings in the MMC console and select the Display
endpoint control settings checkbox

Run a Change application components task and select the Standard

installation type instead of the Basic installation type

None of the above

44. Which action is specified for Adaptive Anomaly Control rules by
default in the Kaspersky Endpoint Security policy?
 Allow

Smart

Notify

Block

45. Consider a network protected with Kaspersky Endpoint Security

and managed through Kaspersky Security Center.
There is a group update task scheduled to start When new updates are
downloaded to the repository. The databases are regularly updated in the
repository, but the group task starts on the client computers only after a
planned synchronization rather than immediately. Why?

UDP port 15000 is inaccessible on the client computer (for example,

blocked by the firewall)

It is intended to function in this manner

A distribution point is not assigned to the group

UDP port 15000 is inaccessible on the Administration Server (for example,

blocked by the firewall)
46. Consider Kaspersky Security Center 13. Which of the following
conditions can make the backup task return an error on the
Administration Server? (select 3 answers)You have reached the max
number of allowed answers

The Administration Server account has no Write permissions for the

backup target directory

The drive where the backup directory is located lacks free space

The Download updates to the repository task is running on the server

(backup copying cannot be started until updating is finished)

The database server account has no Write permissions for the backup
target directory
47. There is a standard computer selection named Many viruses
detected in the Kaspersky Security Center 13 Administration
Console. What does “many” mean?
 The number specified for the Many viruses detected status in the group
properties

More than 10 viruses per 10 minutes

More than 0

The number specified in the selection properties

48. How can this be done?
Many computers have the Critical status with the Virus scan has not been
performed in a long time description in Kaspersky Security Center 13 Web
Console. The administrator thinks that it is not a problem and does not want
this condition to influence computer statuses.

It is impossible

Modify the status change conditions in the policy of Kaspersky Endpoint

Security for Windows

Modify the status change conditions in the administration groups’

properties

Modify the status change conditions in the Administration Server

properties
49. An NFR license has expired after a proof of concept
implemented to demonstrate the capabilities of Kaspersky Endpoint
Security for Windows. Which functions of Kaspersky Endpoint
Security will remain operational?

File Threat Protection and Virus Scan

All Kaspersky Endpoint Security features will stay operational, except for
updates

Only File Threat Protection and Firewall will keep working

None of the above

50. How can you make the Network Agent perform an unplanned
synchronization from the client side?

Carry out the klnagchk command without parameters

It is impossible
Carry out the command klnagchk -sendhb

Carry out the command klnagchk -sync