Total time to complete this test is 70 minutes, you have 70 minutes remaining

Question 1
Which of the following threats does Web Threat Protection repel?
Attempts to download malicious files
Attempts to open a phishing website
Attempts to open a malicious website
Attempts to establish a secure connection to a website whose certificate is not trusted

Question 2
What is the purpose of the klmover.exe utility?
It helps to check Agent—Server connection
It synchronizes the Network Agent and the Administration Server settings
It helps to modify the parameters that Network Agent uses to connect to the Administration Server

Question 3
The administrator created a standalone package on the Administration Server last
week. Now the administrator is at an office computer and wants to copy the
standalone package for local installation. How to do it with only the Administration
Server address on hand?
Open the folder \\<<Administration Server address>>\KLSHARE\PkgInst from the computer and copy the
necessary package
Open https://<<Administration Server address>>/pkginst/ in a browser and download the necessary package
Open http://:8060/pkginst/ in a browser and download the necessary package
Open https://:8061/pkginst/ in a browser and download the necessary package

Question 4
You want to organize computers into groups to be able to specify different
protection parameters for them. In which node of Kaspersky Security Center
console are such groups to be created?
Device selections
Managed devices
Unassigned devices
Policies

Question 5
The administrator wants to prohibit notebooks from connecting to Wi-Fi while
using a wired connection. Which component of Kaspersky Endpoint Security can
help to achieve this?
Anti-Bridging
Host Intrusion Prevention
Firewall

Question 6
What can be downloaded in the Current application versions window?
Distributions of managed applications, such as Kaspersky Endpoint Security
Management plug-ins for the programs
Distributions of new versions of Kaspersky Security Center
Patches for Kaspersky Security Center components
Distributions of all applications by Kaspersky Lab

Question 7
A legitimate application, which users need for their work, is being categorized
as Untrusted and blocked by Kaspersky Endpoint Security 11 for Windows. You
want to prevent this without compromising the level of protection too much. What
are your options?
Manually put the application into a group other than Untrusted in the Host Intrusion Prevention settings
Add the application to the Trusted zone with the option Do not monitor application activity
Disable the use of KSN
Disable the Host Intrusion Prevention component

Question 8
The administrator has disconnected an old computer from the network. When will
its record disappear from the Network poll\Domains node in the Administration
Console, provided the Administration Server has the default settings?
After the next quick Windows network poll
After the next full Windows network poll
In 7 days
In 60 days

Question 9
An administrator of ABC Inc. needs to remotely install Network Agent and
Kaspersky Endpoint Security on five notebooks, which have different local
administrator accounts and are not on the domain. What would you advise?
Create an individual remote installation task for each notebook
Create a single remote installation task and specify accounts of all administrators there
Create a single remote installation task and run it five times; change the target computer and the
administrator account every time

Question 10
What happens when the extended KSN mode is enabled?
When the extended KSN mode is enabled, Kaspersky Security Center switches to the KSN Proxy mode and
starts caching all requests sent to the KSN cloud
When the extended KSN mode is enabled, extended statistical information is sent to the KSN cloud;
executable and non-executable files or their parts can also be sent
When the extended KSN mode is enabled, Kaspersky Security Center establishes a persistent
communication channel to the KSN cloud and caches part of the information from the KSN cloud on the local
drive

Question 11
Which of the following components of Kaspersky Endpoint Security 11 for
Windows do NOT scan files?
Web Threat Protection
Mail Threat Protection
BadUSB Attack Prevention
Network Threat Protection

Question 12
How can you find out when the Administration Server last polled the network to
discover computers?
In the properties of the Unassigned devicesnode
In the properties of the Administration Server node (Advanced \ Administration Server operation
statistics)
In the properties of the Advanced \ Network pollnode
In the Administration Server events

Question 13
What is the default password in the Backup of Administration Server data task
created by the Quick Start wizard of Kaspersky Security Center 10?
 kasperskylab
KasperskyLab
KL
There is no default password

Question 14
Which component of Kaspersky Endpoint Security 11 for Windows except Web
Threat Protection takes part in protection against phishing?
File Threat Protection
Mail Threat Protection
Web Control
None of the above

Question 15
Which resources, when blocked by the control components of Kaspersky Endpoint
Security 11 for Windows, can be temporarily allowed with the help of a special
access key provided by the administrator?
Devices
Software
Web resources(je pense)
None of the above

Question 16
The user downloads an archive with freeware from a website over HTTP. If there is
an infected object in the archive, which component of Kaspersky Endpoint Security
11 for Windows will be the first to detect it?
Web Threat Protection
Firewall
Virus Scan task
File Threat Protection

Question 17
A computer running Windows 7 is protected with Kaspersky Endpoint Security 11
for Windows. You want to prohibit connecting USB scanners to it, but allow
removable USB drives. How can you achieve this?
Block Cameras and scanners in the Device Control
 Block multifunctional devices in the Device Control
Block USB bus in the Device Control
USB scanners cannot be blocked by Kaspersky Endpoint Security 11

Question 18
In which of the following web browsers can’t Web Threat Protection of Kaspersky
Endpoint Security 11 for Windows block dangerous objects?
Internet Explorer
Mozilla Firefox
Google Chrome
None of the above (meaning, blocks in all of them)

Question 19
Which of the following task types pertain to Kaspersky Endpoint Security for
Windows?
Install application remotely
Change application components
Integrity check
Uninstall application remotely

Question 20
With which utility can you check connection between the Network Agent and the
Administration Server and synchronize their settings?
klmover.exe
klnagchck.exe
GetSystemInfo.exe

Question 21
The administrator wants to ensure that Kaspersky Endpoint Security 11 starts
scanning removable devices upon connection. How to achieve that?
Send an e-mail to all employees asking them to use custom scan on their removable devices upon connection
Create a group scan task that scans removable drives and schedule it to run upon new device connection
Enable scan of removable drives on connection in the policy
Allow local tasks to be displayed and managed in the policy and ask users to configure a local task to scan
removable drives
Question 22
Which of the following components of Kaspersky Endpoint Security 11 for
Windows can use the iSwift technology?
File Threat Protection
Mail Threat Protection
Web Threat Protection
Virus Scan tasks

Question 23
After completing the Quick Start wizard of the Kaspersky Security Center 10
Administration Server, the administrator opens the policy of Kaspersky Endpoint
Security 11 for Windows to configure Application Control rules. It turns out that to
set up the rules, you need to select application categories from the list, which is
empty. What should the administrator do to be able to create Application Control
rules?
Create application categories in the Application Control settings
Create application categories in the Advanced | Application management | Application categories node
on the Administration Server
Just wait for the databases to be updated on the Administration Server
Create and run the Inventory task on at least one computer

Question 24
Kaspersky Security Center 10 Administration Server is protected with a third-party
firewall. The administrator has created a standalone package. Which of the
following ports must be opened in the firewall for the users to be able to download
the package using the automatically created http link?
80 and 443
15000
8060 and 8061
13291

Question 25
Which functionality of Kaspersky Security Center is NOT available under the
KESB Select license?
Mobile Device Management
Systems Management
Protection Components Management
 Control Components Management

Question 26
A commercial license has expired in an organization, and the money for purchasing
a new license will be allocated only in a month. Which functions of Kaspersky
Endpoint Security 11 for Windows will NOT work until the new license is in
place?
Virus Scan tasks
Real-time protection components
Update
Management via Kaspersky Security Center

Question 27
In what case does the Quick Start wizard create the Send reports task on the
Kaspersky Security Center 10 Administration Server?
If More than 5000 computers on the networkoption was selected in the installation wizard
If e-mail notification parameters are specified in the Quick Start wizard
If the installation wizard finds a correctly configured local mail client
The Quick Start wizard does not create the Send reports task

Question 28
The administrator wants to exclude operations performed by a particular user from
the scan scope of protection components of Kaspersky Endpoint Security 11 for
Windows. Which of the following components support this kind of exclusion?
File Threat Protection
Behavior Detection
Web Threat Protection
None of the above

Question 29
How to create a new installation package for Kaspersky Endpoint Security in the
Kaspersky Security Center console?
Open the folder with installation packages and make a copy of the directory that contains a Kaspersky
Endpoint Security package
Start the package creation wizard and specify the folder that contains Kaspersky Endpoint Security
installation files, which must include the description file with the .kud extension
 Start the package creation wizard and specify the self-extracting installer of Kaspersky Endpoint Security,
which can be downloaded from the Kaspersky Lab website
Open the list of current application versions in Kaspersky Security Center Administration Console, select the
necessary version of Kaspersky Endpoint Security, and click the button Download and create installation
package

Question 30
A network is protected with Kaspersky Endpoint Security 11 for Windows and
managed by Kaspersky Security Center 10 with the default settings. The
administrator disabled displaying the Kaspersky Endpoint Security interface on
clients. Users have discovered the KES folders on the hard drive and decided to try
to get rid of the protection. How can they do it, supposing they have local
administrator rights?
Uninstall Kaspersky Endpoint Security
Uninstall Network Agent and then disable automatic startup of Kaspersky Endpoint Security 11
Terminate the process of Kaspersky Endpoint Security
Stop the service of Kaspersky Endpoint Security

Question 31
Which of the following reports does the Deliver reports kl (which is created by the
Administration Server Quick Start wizard) email by default?
All reports whose templates are available on the Administration Server
Protection status report
Threats report
Threats report, Protection status report, Database usage report, and Kaspersky Lab software version report

Question 32
Consider Kaspersky Security Center 10. What data is included into a backup copy
of the Administration Server created with a dedicated Kaspersky Security Center
task?
The structure of managed computers
Regular (not stand-alone) application installation packages
The Administration Server database
The contents of the Updates repository

Question 33
Which group tasks and policies does the Quick Start wizard create on the
Kaspersky Security Center 10 Administration Server?
 A policy for Kaspersky Endpoint Security 11 for Windows
An out-of-policy for Kaspersky Endpoint Security 11 for Windows
An Update task for Kaspersky Endpoint Security 11 for Windows
A Rollback task for Kaspersky Endpoint Security 11 for Windows
A Find vulnerabilities and required updates task for Kaspersky Network Agent
A Virus scan task for Kaspersky Endpoint Security 11 for Windows

Question 34
Under which conditions does Kaspersky Endpoint Security switch to the out-of-
office mode with the enabled option Switch to out-of-office policy when
Administration Server is not available?
After an unsuccessful synchronization with the Administration Server
After three unsuccessful synchronizations with the Administration Server or after all networks have been
disconnected
After an unsuccessful synchronization, if the client computer cannot resolve the Administration Server name
After an unsuccessful synchronization, if the client computer does not receive an answer to the
command ping

Question 35
Which actions can be specified in the Web Control rules of Kaspersky Endpoint
Security 11 for Windows?
Allow
Block
Warn
Test

Question 36
Several computers have the Warning status with the Many viruses
detected description in Kaspersky Security Center 10 Administration Console. The
administrator studies the event history on these computers and finds that the
computers are out of danger; all threats have been neutralized correctly. How can
you make the computers’ status normal again?
Delete the virus detection events from the Administration Server database
Carry out the Reset Virus Counter command
Delete the infected objects from the Backuprepository
The status will normalize automatically in 24 hours

Question 37
You plan to use SNMP protocol to monitor status and receive notifications from
Kaspersky Security Center 10 Administration Server. However, the SNMP
agent component is missing from the list of Administration Server components in
the installation wizard. Why?
SNMP agent is an Administration Console component, not a Server component
The SNMP agent component has a separate installer
SNMP agent is always installed, it does not need to be selected as an option
SNMP agent is not displayed if the SNMP service (a component of Windows operating system) is not
installed on the computer

Question 38
Which of the following remote installation methods can be used in the Install
Application remotely task in Kaspersky Security Center 10 when the Network
Agent is not selected to be deployed?
Using Group Policy Objects (GPO) in the Active Directory
Using Logon Scripts in the Active Directory
Using operating system tools: shared folders and remote procedure call (RPC)
Using Network Agent

Question 39
The administrator is trying to find a schedule for a virus scan task, but at any
moment of time either a large number of computers are off, or the users ask to
disable scanning because it slows down the computer. What would you advise?
Enable the mode Concede resources to other applications in the Kaspersky Endpoint Security policy
Enable the mode Scan when the computer is idling in the task
Select the check box Allow management of group tasks in the Kaspersky Endpoint Security policy to
enable users start virus scanning manually
Give up virus scan tasks and select the Highsecurity level in File Threat Protection

Question 40
Which of the following are Kaspersky Security Center tasks?
Perform Windows Update synchronization
Synchronize Active Directory structure
Change Administration Server
Change Administration group

Question 41
Following an installation of the Kaspersky Security Center 10 using
the Standard option in the installation wizard, you create a KES
installation group and place network computers in that group. Additionally you
enable the automatic installation of Network Agent and Kaspersky Endpoint
Security within the group properties.
Which settings of the Install applications remotely task would you need to edit
for the installation to complete successfully?
Specify the license key
Specify the list of accounts to be used to run the task
Change the installation method
Nothing is to be changed

Question 42
How to make the Network Agent perform an unplanned synchronization from the
client side?
Carry out the command klnagchk without parameters
Carry out the command klnagchk -sync
Carry out the command klnagchk -sendhb
It is impossible

Question 43
Which program types does the installer of Kaspersky Endpoint Security consider
incompatible and try to uninstall?
Third-party antiviruses
Third-party firewalls
Third-party backup tools
Third-party remote management tools (such as TeamViewer, VNC, RemoteAdmin)

Question 44
Select the most correct description for the Remediation Engine component:
It monitors file operations and scans files being accessed
It logs actions taken by applications and can roll them back if the software demonstrates dangerous activity
patterns
It analyzes individual operations performed by applications and prohibits little-known applications from
taking potentially dangerous actions
It intercepts software start attempts and blocks applications according to the rules configured by the
administrator
Question 45
Which removable drive access operations can Device Control allow or block in
Kaspersky Endpoint Security 11 for Windows?
Read
Execute
Modify
Delete
Device Control cannot block specific removable drive access operations

Question 46
A workstation is managed remotely through Kaspersky Security Center 10 with the
default settings. Which of the following events invoke pop-up notifications in the
local interface of Kaspersky Endpoint Security 11 for Windows?
Threats have been detected
Suspicious object detected
Network attack detected
Application startup prohibited

Question 47
Installation on which of the following operating systems does Kaspersky Endpoint
Security for Windows 11 support?
Microsoft Windows 10 Pro
Microsoft Windows 10 Home(peut etre losqu’on demandera trois réponse)
Microsoft Windows 10 Home Premium
Microsoft Windows 10 Enterprise

Question 48
Select the correct statements about the KL-AK- account created by the installation
wizard of Kaspersky Security Center Administration Server:
It is included in the Domain Admins group
It is included in the BUILTIN\Administratorsgroup
It is included in the KLAdmins group
It has the same permissions as theBUILTIN\Administrators group
It cannot be used to log on to the system locally

Question 49
Which port of the Administration Server do Network Agents connect to under the
default settings?
TCP 13000
TCP 14000
TCP 13291
UDP 15000

Question 50
When does the Administration Server send packets to the UDP port of the Network
Agent?
Periodically (by default, once every 15 min)
At the administrator’s command Force synchronization
When the administrator creates a report
When the administrator adjusts settings applicable to the computer

Continue