McAfee McAfee Certifications MA0-101 Questions & Answers

• Question 51:

  Which CLI command is used to determine that the Sensor has established trust with the Manager?

  A. config

  B. status

  C. trust

  D. show

  Correct Answer: B

• Question 52:

  Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

  A. Tap

  B. Span

  C. In-line

  D. Failover

  Correct Answer: C

• Question 53:

  Why would attacks not be blocked when the Sensor monitoring ports are configured in SPAN mode?

  A. Blocking of attacks only occurs when the Sensor is placed in In-line mode

  B. Blocking of attacks only occurs when the Sensor is placed in TAP mode

  C. The Sensor has not learned to identify these attacks

  D. Blocking of attacks only occurs when the Sensor has been configured for failover

  Correct Answer: A

• Question 54:

  How are packet logs viewed from within the Manager?

  A. Push the packet log to the Sensor and open it from there

  B. Packet logs cannot be viewed from within the Manager

  C. Save and export the Packet log in order to open it

  D. Set the log to be viewable with Wireshark/Ethereal

  Correct Answer: D

• Question 55:

  Which logs are used to determine who was logged into the Manager the last time a signature set update was pushed from the Manager to the Sensor?

  A. Trace log

  B. Fault log

  C. Manager ems log

  D. User Activity Audit log

  Correct Answer: D

• Question 56:

  Which type of NAC configuration allows a host to be subjected to both DHCP and IBAC based NAC when configured on different ports?

  A. Integrated

  B. DHCP

  C. Health-based

  D. Hybrid

  Correct Answer: D

• Question 57:

  Which step needs to be completed before a sensor can be configured?

  A. Sensor IP addressing must be set

  B. Sensor must be added to the Manager

  C. Sensor username and password must be set

  D. Sensor Gateway addressing must be set

  Correct Answer: B

• Question 58:

  Which of the following rules do sub-interfaces inherit when they are created?

  A. ACL rules

  B. Sensor rules only

  C. Port rules only

  D. Sensor and port rules

  Correct Answer: D

• Question 59:

  Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

  A. Audit

  B. IPS

  C. TAP

  D. Simulation

  E. Enforcement

  F. SPAN

  Correct Answer: ADE

• Question 60:

  Policies can be configured to drop packets when which of the following has been defined?

  A. The policy has been enabled

  B. The underlying rule set permits dropped packets

  C. The sensor is deployed in Inline mode

  D. The policy has been cloned

  Correct Answer: C