McAfee MA0-101 Online Practice Questions and Exam Preparation

McAfee MA0-101 Online Questions & Answers

• Question 31:

  Which of the following options is the best practice to use if you need to edit all attacks with a specific seventy number within an IPS policy?

  A. Use the Bulk Edit feature within the Policy Editor
  B. Create and run the appropriate database query
  C. Edit the attacks individually
  D. Use the Bulk Edit feature within the Reconnaissance Editor
  A. Use the Bulk Edit feature within the Policy Editor

• Question 32:

  Policies can be configured to drop packets when which of the following has been defined?

  A. The policy has been enabled
  B. The underlying rule set permits dropped packets
  C. The sensor is deployed in Inline mode
  D. The policy has been cloned
  C. The sensor is deployed in Inline mode

• Question 33:

  What is the command to force the sensor out of Layer 2 Passthru mode?

  A. Layer2 mode off
  B. Layer2 mode on
  C. Layer2 mode assert
  D. Layer2 mode deassert
  D. Layer2 mode deassert

• Question 34:

  Which of the following CLI commands removes trust between a sensor and manager, removes signatures and restores default port settings, but retains IP configuration?

  A. Resetconfig
  B. Deletesignatures
  C. Factotydefaults
  D. Deinstall
  A. Resetconfig

• Question 35:

  Which of the following information is unique to Host Intrusion Prevention alerts? (Choose three)

  A. Destination IP
  B. User
  C. Source IP
  D. Agent IP
  E. Agent name
  B. User
  D. Agent IP
  E. Agent name

• Question 36:

  What is the command to enable the sensor to forward all traffic at Layer 2 if a failure occurs?

  A. Layer2 mode off
  B. Layer2modeon
  C. Layer2 mode assert
  D. Layer2 mode deassert
  B. Layer2modeon

• Question 37:

  Which of the following methods are available for upgrading a Sensor image?

  A. TFTP and/or through the Manager
  B. PUTTY and/or through the Manager
  C. Console connection and/or through the Manager
  D. TFTP, console connection and/or through the Manager
  A. TFTP and/or through the Manager

• Question 38:

  Which server type needs to be configured as a requirement before the Quarantined user classes and Quarantined DHCP server(s) are configured?

  A. Integrated DHCP server
  B. Wildcard DNS server
  C. WINS server
  D. Portal server
  B. Wildcard DNS server

• Question 39:

  Which is the correct syntax for the 'set dosprevenbonseverity' command?

  A. Set dospreventionseveriry tcp-rst 150
  B. Set dospreventionseverity icmp-echo-reply enable 150
  C. Set dospreventionseverity tcp-syn inbound 150
  D. Set dosprevenbonseverity ip-fragment inbound
  C. Set dospreventionseverity tcp-syn inbound 150

• Question 40:

  In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

  A. Customer Identification tag (CD)
  B. VLAN Identifier tag (VID)
  C. Outer Identifier tag (OID)
  D. Inner Identifier tad (ID)
  A. Customer Identification tag (CD)