McAfee McAfee Certifications MA0-103 Questions & Answers

• Question 21:

  Which of the following protects the DLP Endpoint client from malicious interferences?

  A. Agent Watchdogs Only

  B. VirusScan Enterprise

  C. Host Intrusion Prevention System

  D. Data Access Protection module and Agent Watchdogs

  Correct Answer: D

• Question 22:

  An employee attempts to upload company data in violation of corporate security policy using a secure HTTPS connection. The DLPe Administrator has configured rules with a blocking reaction and Content Classification. Can the data be prevented from being uploaded over HTTPS?

  A. No, location Based Tagging Rules need to be configured

  B. No, content posted over HTTPS cannot be inspected

  C. Yes, a protection rule with a block reaction has been configured

  D. Yes, Content Classification has occurred

  Correct Answer: C

• Question 23:

  An organization's security policy prohibits the use of Internet based file sharing and storage applications. To monitor violation of this policy, which rule can the DLP Endpoint administrator configure?

  A. Email Protection Rule

  B. File System Protection Rule

  C. Application File Access Protection Rule

  D. Cloud Protection Rule

  Correct Answer: D

• Question 24:

  Which encryption type is NOT available when creating a file system discovery rule?

  A. Oracle Digital Rights Management

  B. McAfee Endpoint Encryption

  C. Adobe LiveCycle Rights Management Encryption

  D. Not encrypted

  Correct Answer: A

• Question 25:

  An executive sends merger documents to legal counsel. Policy dictates the documents should be encrypted, but they are being sent in plain text. What is the appropriate action to configure in such a case using DLPe protection rules?

  A. Monitor the activity using a File System Protection Rule, store the evidence and notify the user.

  B. Verify the violation and send an alert to the administrator.

  C. An Email Protection Rule should be used to block the email unless the documents are encrypted.

  D. Do nothing.

  Correct Answer: C

• Question 26:

  Following production deployment the DLP Endpoint Administrator begins to receive an increasing number of calls related to credit card number content detection false positives. Which of the following can the administrator do to reduce false positives?

  A. Turn on verbose logging

  B. Increase dictionary weights

  C. Increase text pattern thresholds

  D. Use regular expression validators

  Correct Answer: D

• Question 27:

  Which of the following is an authorized method to remove the McAfee DLPe Agent?

  A. ePO product deployment task

  B. Agent override

  C. Add the computer to a privileged user group

  D. ePO server task

  Correct Answer: A

• Question 28:

  How can different modules within the DLP agent configuration be enabled?

  A. Use the miscellaneous section

  B. Use the advanced configuration section

  C. Use the application modules section

  D. Use the user interface service section

  Correct Answer: A

• Question 29:

  How can users be prohibited from transferring sensitive files to attached storage devices?

  A. Configure a digital rights management policy

  B. Configure a Removable Storage Protection rule

  C. Configure a Clipboard Protection rule

  D. Notify users that sensitive files should not be copied

  Correct Answer: B

• Question 30:

  Which of the following is NOT a proactive approach to preventing performance issues?

  A. Adding exclusions for security and indexing software

  B. Removing unnecessary applications and application definitions from the policy

  C. Disabling unused modules in Agent Configuration

  D. Running a File System Discovery Scan

  Correct Answer: D