Total time to complete this test is 70 minutes, you have 70 minutes remaining

Question 1
The administrator selected to accept KSN statement and allow the use of KSN in the Quick Start Wizard
during the installation of the Kaspersky Security Center 10 Administration Server. Later, the
management decided to opt out of using KSN. How should the administrator disable the use of KSN in
the Kaspersky Endpoint Security 10 on the client computers?

1. Clear the check box that allows the use of KSN in the properties of the Administration
Server
2. Deselect the option to use KSN in the Kaspersky Endpoint Security 10 policy
3. Reinstall the Administration Server and choose not to use KSN in the Quick start wizardIt
is not possible

Question 2

Kaspersky Security Center 10 uses a remote database. To make a backup copy of all data stored in the
database, the administrator needs to:

1. Just run the Backup of Administration Server data task, everything will be done automatically
2. Run the klbackup.exe utility on the computer where the database is located
3. Run the klbackup.exe utility on the Administration Server, but with the –path switchNone of the
above

Question 3

Which of the following protocols can be specified in the Firewall rules in Kaspersky Endpoint Security 10
for Windows?

1. ARP
2. TCP
3. UDP
4. ICMP
5. SNMP
6. SMTP

Question 4

What can be downloaded in the Current application versions window?

1. Distributions of managed applications, such as Kaspersky Endpoint Security Management plug-

ins for the programs
2. Distributions of new versions of Kaspersky Security Center
3. Patches for Kaspersky Security Center components
4. Distributions of all applications by Kaspersky Lab
Question 5

Which of the control components within Kaspersky Endpoint Security 10 for Windows permit specifying
different limitations for different users?

1. Application Startup Control

2. Application Privilege Control
3. Device Control
4. Web Control

Question 6

Which functions of Kaspersky Endpoint Security for Windows are NOT available under the KESB Select
license?

1. Encryption of hard drives

2. File and Folder Encryption
3. Device Control
4. Integrity Check

Question 7

Which access to network do programs get that belong to the Untrusted group on Microsoft Windows 7
protected with standard installation of Kaspersky Endpoint Security 10 under the default settings?

1. None, because Application Privilege Control will not allow them to start
2. Full network access
3. Access only to trusted networks
4. Access to trusted and local networks

Question 8

Which of the following reports does the Deliver reports task (which is created by the Administration
Server Quick Start wizard) email by default?

1. All reports whose templates are available on the Administration Server

2. Protection Status Report
3. Viruses Report
4. Viruses report, Protection status report, Database usage report, and Kaspersky Lab software
version report

Question 9

Consider Kaspersky Security Center 10. The administrator selected the Path to folder parameter as a
condition for an application category and specified the C:\Program Files\Microsoft\ value. Which
executable files will meet this condition?

1. The files whose checksums coincide with the checksums of the files that were located in folder
С:\Program Files\Microsoft\ on the Administration Server when the category was being created
 2. The files whose checksums coincide with the checksums of the files located in С:\Program
Files\Microsoft\ on the Administration Server. Every time the Administration Server is restarted,
the list of checksums is updated to reflect the current folder contents
3. The files whose metadata coincides with the metadata of a file located in С:\Program
Files\Microsoft\ on the Administration Server
4. The files whose path begins with С:\Program Files\Microsoft\

Question 10

Which removable drive access operations can Device Control allow or block in Kaspersky Endpoint
Security 10 for Windows?

1. Read
2. Execute
3. Modify
4. Delete
5. Device Control cannot block specific removable drive access operations

Question 11

Under which conditions does Kaspersky Endpoint Security switch to the out-of-office mode with the
default settings? REF.P205

1. None. Conditions are not specified by default

2. After an unsuccessful synchronization with the Administration Server
3. After three unsuccessful synchronizations with the Administration Server or after all networks
have been disconnected

Question 12

The remote installation wizard prompts to select a license that will activate Kaspersky Endpoint Security
after the installation, but the list of licenses is empty, although there are Kaspersky Endpoint Security
licenses in the repository. What does it mean?

1. The licenses have expired

2. The licenses are blacklisted
3. Automatic installation on the computers is enabled in the licenses
4. Automatic installation on the computers is NOT enabled in the licenses

Question 13

You want to block the start of a program on Windows servers. How can you do it with Kaspersky
Endpoint Security 10 for Windows?

1. It is impossible for servers

2. Add the program to the Untrusted list in the Application Privilege Control component settings
3. Block its start using Application Startup Control
4. Add the program to the Untrusted list in the System Watcher component settings
Question 14

How many concurrent active policies of Kaspersky Endpoint Security 10 SP2 for Windows can there be
within a single group?

1. 1
2. 2 at most
3. 5
4. As many as you want

Question 15

What does a closed lock mean near a parameter in a group policy of Kaspersky Endpoint Security?

1. This parameter cannot be changed in the local interface of Kaspersky Endpoint Security
2. This parameter cannot be changed in the subgroups’ policies (unless inheritance is disabled)
3. This parameter can be changed only by the administrator who created the policy
4. This parameter is password-protected

Question 16
The administrator has deleted a computer account from Active Directory. When will its record disappear
from the Network poll\Active Directory node in the Administration Console, provided the computers are
discovered with the default settings?

1. After the next Active Directory poll

2. After the next full Windows network poll
3. In 7 days
4. In 60 days

Question 17
Consider Kaspersky Security Center 10 and Kaspersky Endpoint Security 10 for Windows. The
Administration Server is installed with standard settings and is specified as the update source in group
tasks. Which server ports must be opened for the client computers to update successfully?

1. HTTP port 80
2. UDP ports 137 and 138, TCP ports 139 and 445
3. TCP ports 8060 and 8061
4. TCP port 13000

Question 18
You plan to use SNMP protocol to monitor status and receive notifications from Kaspersky Security
Center 10 Administration Server. However, the SNMP agent component is missing from the list of
Administration Server components in the installation wizard. Why?

1. SNMP agent is an Administration Console component, not a Server component

2. The SNMP agent component has a separate installer
3. SNMP agent is always installed, it does not need to be selected as an option
 4. SNMP agent is not displayed if the SNMP service (a component of Windows operating system) is
not installed on the computer

Question 19

How can you find out when the Administration Server last polled the network to discover computers?

1. In the properties of the Unassigned devices node

2. In the properties of the Administration Server node (Advanced \ Administration Server
operation statistics)
3. In the properties of the Advanced \ Network poll node
4. In the Administration Server events

Question 20

What does the network size selected in the Kaspersky Security Center Administration Server installation
wizard influence?ref .p30

1. The schedule of group tasks

2. The limit of events in the Administration Server database
3. The Administration Console interface settings
4. The synchronization interval in the KSC Network Agent policy

Question 21

Which Kaspersky Endpoint Security 10 for Windows components can be installed on a server operating
system?

1. File Anti-Virus
2. Mail Anti-Virus
3. Firewall
4. Application Startup Control
5. Web Control

Question 22

Consider Kaspersky Security Center 10. There is a Virus scan task in the Managed devices group, and
there is a subgroup named Servers for which you want to change the schedule of anti-virus scanning.
How to achieve this?

1. Exclude the Servers subgroup from the scan scope of the Virus scan task configured in the
Managed devices group, and create a separate Virus scan task with the necessary settings in the
Servers subgroup
2. Create a Virus scan task with the same name and the necessary settings in the Servers subgroup;
it will run instead of the parent group task
3. Disable tasks inheritance for the Servers group and create a separate Virus scan task with the
necessary settings there
4. The task configured in the parental group always runs in a subgroup
Question 23

Installation on which of the following operating systems does Kaspersky Endpoint Security for Windows
10 SP2 support?

1. Microsoft Windows XP
2. Microsoft Windows Vista
3. Microsoft Windows 7
4. Microsoft Windows 8
5. Microsoft Windows 8.1
6. Microsoft Windows 10

Question 24

You are planning to deploy Kaspersky Endpoint Security for Business to implement a centrally managed
network protection. Which applications will you need to install on the network computers?

1. Kaspersky Security Center Network Agent

2. Microsoft SQL Server Agent
3. Kaspersky Endpoint Security for Windows
4. Kaspersky Endpoint Security for Windows Console

Question 25

Where can you disable installation of unapproved patches for Kaspersky Security Center 10 SP2 Network
Agent?

1. In the Administration Server properties

2. In the properties of the “Download updates to the repository” task
3. In the Network Agent policy
4. In the Network Agent update task

Question 26

In which of the following situations you need NOT specify the administrator account in the remote
installation task?

1. The administrator account is disabled on the remote computer

2. Network Agent is already installed on the computer and connected to the Server
3. The account of the Administration Server service has administrator permissions on the
computer
4. Windows 10 operating system is installed on the computer
5. The computer has been prepared with the RIPrep.exe utility
6. Kaspersky Endpoint Security 10 SP2 is already installed on the computer
Question 27

The administrator wants to ensure that Kaspersky Endpoint Security 10 starts scanning removable
devices upon connection. How to achieve that?

1. Send an e-mail to all employees asking them to use custom scan on their removable devices
upon connection
2. Create a group scan task that scans removable drives and schedule it to run upon new device
connection
3. Enable scan of removable drives on connection in the policy
4. Allow local tasks to be displayed and managed in the policy and ask users to configure a local
task to scan removable drives

Question 28

Which network polling methods are enabled by default in Kaspersky Security Center 10 Administration
Server?

1. Quick Windows Network Poll

2. Full Windows Network Poll
3. Active Directory polling
4. IP subnet polling

Question 29

How does the remote installation task of Kaspersky Endpoint Security for Windows 10 SP2 behave by
default if a third-party protection application is detected on a computer?

1. Returns an error and prompts the administrator to uninstall the application manually
2. Uninstalls the third-party protection application automatically and proceeds with the installation
3. Installs Kaspersky Endpoint Security, but completes with a warning that the third-party
protection application must be uninstalled
4. Prompts the user whether to uninstall the third-party protection application

Question 30

The network is protected with Kaspersky Endpoint Security 10 and managed with Kaspersky Security
Center 10. Can you configure a virus scan of the system drive to run only when the screensaver is on or
the Windows session is locked?

1. Yes, you can select the check box Suspend scheduled scanning when the screensaver is off and
the computer is unlocked in the Kaspersky Endpoint Security 10 policy
2. Yes, you can create a virus scan task for the system drive with the Suspend scheduled scanning
when the screensaver is off and the computer is unlocked option enabled
3. Yes, by selecting the Perform Idle Scan option in the Kaspersky Endpoint Security 10 policy
4. No
Question 31

With which utility can you check connection between the Network Agent and the Administration Server
and synchronize their settings?

1. klmover.exe
2. klnagchck.exe
3. GetSystemInfo.exe

Question 32

Which of the following Administration Server parameters cannot be modified without reinstalling
Kaspersky Security Center 10?

1. Administration Server communication ports

2. Administration Server account
3. SQL server address
4. Shared folder location

Question 33

Which of the following remote installation methods can be used in the Install Application remotely task
in Kaspersky Security Center 10 when the Network Agent is not selected to be deployed?

1. Using Group Policy Objects (GPO) in the Active Directory

2. Using Logon Scripts in the Active Directory
3. Using operating system tools: shared folders and remote procedure call (RPC)
4. Using Network Agent

Question 34

You want to publish installation packages in Active Directory group policy via the Kaspersky Security
Center 10 Administration Server. Which packages can be published this way?

1. Any packages available in the Installation packages repository

2. Packages of Kaspersky Lab products only
3. Only Kaspersky Network Agent packages
4. None

Question 35

Which of the following database servers can Kaspersky Security Center work with?

1. Oracle
2. Microsoft SQL
3. MySQL
4. DB2
5. PostgreSQL
Question 36

Which component is NOT available in Kaspersky Endpoint Security 10 for Windows?

1. System Watcher
2. Windows Integrity Check
3. Web Control
4. Management of Microsoft BitLocker encryption

Question 37

Which control components of Kaspersky Endpoint Security 10 for Windows can request information
from KSN?

1. Application Startup Control

2. Application Privilege Control
3. Web Control
4. Device Control

Question 38

In which cases does the Administration Server update databases in the installation packages of
Kaspersky Endpoint Security?

1. When the administrator clicks the button Update databases in the package properties
2. Every time after databases are updated in the repository
3. Daily, after databases are updated in the repository
4. When the package is created

Question 39

Which networks are Trusted in the Firewall policy of Kaspersky Endpoint Security 10 under the default
settings?

1. None
2. 127.0.0.1/32
3. 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8
4. The networks to which the Administration Server is connected

Question 40

While studying the settings of a Kaspersky Endpoint Security package, the administrator discovers that a
key file is specified in the package properties. Nobody has worked with the console except for the
administrator, and he is sure that he has not added a key to the package. How did this key appear?

1. Kaspersky Endpoint Security packages include a 30-day trial key by default

2. When the administrator selects a key in the remote installation wizard, the wizard saves the key
in the properties of the Kaspersky Endpoint Security package
3. When the administrator adds a new key to the Administration Server storage, the Server adds
this key to all suitable packages automatically
 4. When the administrator selects the option Automatically deployed key in the key properties, the
Administration Server adds the key to all suitable packages

Question 41

What version of SQL server is included in the Kaspersky Security Center 10 SP2 MR1 Administration
Server distribution?

1. MySQL Server
2. Microsoft SQL Server 2008 R2 Express
3. Microsoft SQL Server 2014 Express
4. Microsoft SQL Server 2016 Compact

Question 42

Can the start of group update tasks be randomized in Kaspersky Security Center 10 to avoid
simultaneous connections of all client computers to the Administration Server?

1. Yes
2. Yes, but only if the From 1000 to 5000 computers or More than 5000 computers option was
selected during the installation of the Administration Server
3. Yes, but only if the computers are organized into several subgroups with update tasks having
different schedules
4. No

Question 43

Consider Kaspersky Security Center 10. Which of the following conditions can make the backup copying
task return an error on the Administration Server?

1. The Administration Server account has no Write permissions for the backup target directory
2. The database server account has no Write permissions for the backup target directory
3. The Download updates to the repository task is running on the server (backup copying cannot
be started until updating is finished)
4. The drive where the directory with the server backup copies is located lacks free space

Question 44

Which of the following components of Kaspersky Endpoint Security 10 for Windows do NOT scan files?

1. Web Anti-Virus
2. Mail Anti-Virus
3. IM Anti-Virus
4. Network Attack Blocker

Question 45

A network is protected with Kaspersky Endpoint Security 10 for Windows and managed by Kaspersky
Security Center 10 with the default settings. What should the administrator do to completely prohibit
disabling the protection without hiding it?
 1. Set a password for pausing protection
2. Set a password for uninstalling Kaspersky Endpoint Security
3. Prohibit stopping the Kaspersky Endpoint Security service
4. Block access to the Kaspersky Endpoint Security process

Question 46
Which of the following can File Anti-Virus of Kaspersky Endpoint Security 10 for Windows do?

1. Scans files on drives on access

2. Scans files on drives on demand
3. Scans all files, regardless of the source and interception method
4. Controls access to the registry

Question 47
Consider Kaspersky Endpoint Security 10 and Kaspersky Security Center 10. How can you tell which KL
category a particular executable file belongs to?

1. Consult the Executable files repository in the Administration Console

2. Consult the Application categories node in the Administration Console
3. Consult the Application Monitor in Kaspersky Endpoint Security 10 local interface
4. None of the above

Question 48
Where can you specify the conditions under which Kaspersky Endpoint Security 10 switches to the out-
of-office policy?

1. In the policy of Kaspersky Endpoint Security

2. In the group properties
3. In the Network Agent policy
4. The conditions are hard-coded and you cannot modify them
5. In the Administration Server policy

Question 49
Which of the following are Kaspersky Security Center tasks?

1. Perform Windows Update synchronization

2. Synchronize Active Directory structure
3. Change Administration Server
4. Change Administration group

Question 50
The administrator has noticed that the interface of Kaspersky Endpoint Security 10 for Windows doesn’t
respond to commands when accessing the computer via a 3rd-party remote desktop tool. Which
component or subsystem of Kaspersky Endpoint Security 10 for Windows causes this behavior?
1. Firewall
2. Self-Defense
3. System Watcher
4. Application Privilege Control
5. None of the above