700-281 · Question #64
TRR and TRT are associated with Which WSA component?
The correct answer is C. Anti-Malware. TRR (Threat Risk Rating) and TRT (Threat Risk Threshold) are core parameters used by the WSA's Anti-Malware scanning engines (such as Webroot and McAfee). TRR is the numeric score an engine assigns to a scanned object indicating its maliciousness likelihood, while TRT is the…
Question
TRR and TRT are associated with Which WSA component?
Options
- AWeb Reputation
- BL4TM
- CAnti-Malware
- DURL Filters
How the community answered
(35 responses)- B6% (2)
- C91% (32)
- D3% (1)
Explanation
TRR (Threat Risk Rating) and TRT (Threat Risk Threshold) are core parameters used by the WSA's Anti-Malware scanning engines (such as Webroot and McAfee). TRR is the numeric score an engine assigns to a scanned object indicating its maliciousness likelihood, while TRT is the administrator-configured threshold that determines when the WSA blocks that object - making both concepts intrinsic to the malware scanning workflow.
Why the distractors are wrong:
- A (Web Reputation): Uses its own scoring system called WBRS (Web-Based Reputation Score), not TRR/TRT.
- B (L4TM): The Layer 4 Traffic Monitor inspects raw TCP connections and tracks suspicious IP activity - it has no concept of per-object risk ratings.
- D (URL Filters): URL filtering works on category classifications and reputation scores tied to URLs, not threat risk ratings applied to file/object content.
Memory tip: Both TRR and TRT start with "Threat Risk" - and the only WSA component whose job is evaluating the risk of a threat inside a file is Anti-Malware. If you see "Threat Risk," think scanner → Anti-Malware.
Topics
Community Discussion
No community discussion yet for this question.