Ransomware Protection

ADC refers to this list to check if the application (and its parent processes) is signed by a trusted vendor.

GCL

VSAPI Check

Grid Value

It acts as the ‘intelligence’ wing of the Ransomware Protection feature.

Anti- Exploit

UMH

ADC

SRP

DRE

DRE will not back when the files are in exclude folder list on ____.

tmtt.ptn

tmtd.ptn

dre.ptn

gpl.ptn

If the process is not in GCL & GRID value = unknown & (Prevalence > 20 & Maturity < 3 months & the file is renamed or deleted, it be terminated and quarantined.

True

False

It receives system events and backup files before suspicious threats can modify files and perform other malicious behavior.

UMH

DRE

SRP

ADC

Backup files are stored in ____.

…\Trend Micro\Security Agent\CCSF\module\DRE\data\Backup folder

…\Trend Micro\Security Agent\CCSF\DRE\data\Backup folder

…\Trend Micro\Security Agent\CCSF\DRE\data

It monitors files with extensions that are defined in its pattern.

SRP

ADC

UMH

DRE

When enabled, the UMH driver, tmumh.sys, injects all processes that are in the exclusion list with either tmumevt.dll and tmmon.dll or tmumevt64.dll and tmmon64.dll depending if the OS is 32-bit or 64-bit.

True

False

If UMH feature is only enabled, AEGIS will use this pattern file to decide if the malicious process/event needs to be terminated or Cleaned.

tmtt.ptn

tmtd.ptn

tmumh.ptn

gpl.ptn

If Anti-exploit feature is enabled, AEGIS will use this pattern file to decide if the malicious process/event needs to be terminated.

gpl.ptn

tmumh.ptn

tmtd.ptn

tmtt.ptn

{"name":"Ransomware Protection", "url":"https://www.quiz-maker.com/QC5CJNOWQ","txt":"ADC refers to this list to check if the application (and its parent processes) is signed by a trusted vendor., It acts as the ‘intelligence’ wing of the Ransomware Protection feature., DRE will not back when the files are in exclude folder list on ____.","img":"https://www.quiz-maker.com/3012/images/ogquiz.png"}

Quiz Maker