McAfee McAfee Certifications MA0-101 Questions & Answers

• Question 61:

  Setting a threshold on a sensor to react if traffic volume exceeds the threshold limit is an example of what specific detection method?

  A. Signature based

  B. DHCP based

  C. Pattern matching

  D. Denial of Service (DoS)

  Correct Answer: D

• Question 62:

  Which of the following methods are available for upgrading a Sensor image?

  A. TFTP and/or through the Manager

  B. PUTTY and/or through the Manager

  C. Console connection and/or through the Manager

  D. TFTP, console connection and/or through the Manager

  Correct Answer: A

• Question 63:

  Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

  A. Redundant

  B. SPAN

  C. TAP

  D. In-line

  Correct Answer: B

• Question 64:

  Which of the following are the different operational modes of System Health based NAC? (Choose three)

  A. Audit

  B. Simulation

  C. Enforcement

  D. Prevention

  E. Quarantine

  Correct Answer: ABC

• Question 65:

  Which policy is assigned to a child domain by default?

  A. The default IDS policy

  B. The default IPS policy

  C. No default policy

  D. The policy of the parent domain

  Correct Answer: D

• Question 66:

  Which of the following modes can be used to implement DoS detection? (Choose two)

  A. Learning Mode

  B. Threshold Mode

  C. Configuration Mode

  D. Adaptive Mode

  E. Transition Mode

  Correct Answer: AB

• Question 67:

  Which command is used to manually download signature tiles from the tftpserver when connectivity to the Manager is not available?

  A. Loadimage WORD

  B. Loadconfig WORD

  C. Loadconfiguration WORD

  D. Loadsigset WORD

  Correct Answer: C

• Question 68:

  When the buffer on the alert cache has been filled, what happens to current incoming alerts?

  A. Incoming alerts are added to the cache and the oldest alerts are dropped

  B. Incoming alerts are not added to the cache and are dropped

  C. Incoming alerts are held in queue until cache space is cleared

  D. Incoming alerts are added to the database directly

  Correct Answer: A

• Question 69:

  If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

  A. Fair

  B. Poor

  C. Serious

  D. Unknown

  Correct Answer: D

• Question 70:

  Reconnaissance Policies can be applied to which of the following sensor nodes?

  A. Sensor name node only

  B. Sensor interface node only

  C. Sensor sub-interface node only

  D. Sensor name, interface and sub-interface node

  Correct Answer: A