Lab_02 - CloudPassage Halo Technical Enablement

Select all OSes supported by Halo

What is the domain name of CloudPassage for API call?

Grid.cloudpassage.com

Api.cloudpassage.com

Portal.cloudpassage.com

Www.cloudpassage.com

Please select True statement for File Integrity Monitoring

Halo FIM policy can monitor up to 30,000 objects

Halo FIM policy does not analyze file over 1GB in size

Halo FIM can be used to monitor Linux /proc folder

Halo FIM only return up to 10,000 filed result per scan

When you enable “log” on Halo Firewall rule, where does it log the Firewall related events for Linux?

Log file of Halo agent

/var/log/secure (or where IPtables related events are logged)

When you enable “log” on Halo Firewall rule, where does it log the Firewall related events for Windows?

Log file of Halo agent

Windows Security Events

If you want to monitor specific key-value pair of certain file in Linux, which module would you use?

If internet link goes down between agent and Security Orchestration Engine,

Halo agent will still work with the last policy it was configured to use.

User would still be able to authenticate & login to server protected by GhostPort

Which compliance rules did Halo agent and Security Orchestration Engine obtained? Select all that applies.

SOC2

PCI-DSS v3.0 Level 1

AWS Security Competency

FedRAMP

Which hash algorithms does Halo agent use to calculate the hash value of the file being monitored by FIM policy?

MD-5

SHA-128

SHA-1

SHA-256

What is the default life time of security token provided by Halo Security Orchestration Engine?

60 seconds

600 seconds

900 seconds

120 seconds

More Surveys