McAfee MA0-101 Online Practice Questions and Exam Preparation

McAfee MA0-101 Online Questions & Answers

• Question 11:

  As a recommended best practice, what is the total number of sensors that should be managed through a single Network Security Manager installation?

  A. 25
  B. 50
  C. 75
  D. 100
  B. 50

• Question 12:

  Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

  A. Device List
  B. Resource Tree
  C. Details Pane
  D. System Links
  A. Device List

• Question 13:

  Setting a threshold limit in order for the IPS to react if traffic volume exceeds this limit is an example of which type of detection method?

  A. Statistical anomaly
  B. Protocol anomaly
  C. Pattern matching
  D. Application anomaly
  A. Statistical anomaly

• Question 14:

  Which command allows an off-line signature file download from a tftp server when connectivity to the Manager is unavailable?

  A. Loadimage
  B. Loadconfig
  C. Loadconfiguration
  D. Loadsigset
  C. Loadconfiguration

• Question 15:

  Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

  A. Audit
  B. IPS
  C. TAP
  D. Simulation
  E. Enforcement
  F. SPAN
  A. Audit
  D. Simulation
  E. Enforcement

• Question 16:

  Which of the following cannot be configured at the sub-interface level?

  A. DoS Learning Mode
  B. Assigned Policy
  C. Attack Filters
  D. Interface type
  A. DoS Learning Mode

• Question 17:

  Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

  A. Tap B. Span
  C. In-line
  D. Failover
  C. In-line

• Question 18:

  Which of the following are the different operational modes of System Health based NAC? (Choose three)

  A. Audit
  B. Simulation
  C. Enforcement
  D. Prevention
  E. Quarantine
  A. Audit
  B. Simulation
  C. Enforcement

• Question 19:

  Which of the following modes can be used to implement DoS detection? (Choose two)

  A. Learning Mode
  B. Threshold Mode
  C. Configuration Mode
  D. Adaptive Mode
  E. Transition Mode
  A. Learning Mode
  B. Threshold Mode

• Question 20:

  Which sensor action allows the detection and dropping of attacks in real-time?

  A. Host Quarantine action
  B. ICMP Host unreachable
  C. TCP reset
  D. Drop further packets
  D. Drop further packets