McAfee MA0-107 Online Practice Questions and Exam Preparation

McAfee MA0-107 Online Questions & Answers

• Question 1:

  An ePO administrator wants to configure system utilization for on-demand scanning to conform to best-practice recommendations based on the ENS Product Guide. To do this, the administrator should:

  A. set system utilization to "Normal" for systems with end-user activity and "Low" for systems with large volumes/little end-user activity.
  B. set system utilization to "Low" for systems with end-user activity and "Normal" for systems with large volumes/little end-user activity.
  C. set system utilization to "Low" for systems with end-user activity and "Low" for systems with large volumes/little end-user activity.
  D. set system utilization to "Below Normal" for systems with end-user activity and "Normal" for systems with large volumes/little end-user activity.
  A. set system utilization to "Normal" for systems with end-user activity and "Low" for systems with large volumes/little end-user activity.

• Question 2:

  A user is reporting a functional issue with the ENS client. Which of the following logs should be checked?

  A. ExploitPrevention_Debug.log
  B. OnDemandScan_Debug.log
  C. EndpointSecurityPlatform_Errors.log
  D. AdaptiveThreatProtection_Debug.log
  C. EndpointSecurityPlatform_Errors.log

• Question 3:

  An ENS administrator wants to dynamically create firewall rules required for the environment. In Enable Firewall Policies/Options, which of the following should be utilized?

  A. Retain existing user added rules
  B. Adaptive mode
  C. Log all blocked traffic
  D. Log all allowed traffic
  C. Log all blocked traffic

• Question 4:

  An administrator wants to see more details about recent activity on an endpoint than what is shown in the ENS console. In which of the following locations can the administrator view the log files?

  A. %ProgramFiles%\McAfee\Logs
  B. %ProgramFiles%\McAfee\Endpoint Security\Logs
  C. %ProgramData%\McAfee\Endpoint Security\Logs
  D. %ProgramData%\McAfee\Logs
  C. %ProgramData%\McAfee\Endpoint Security\Logs

• Question 5:

  On Windows 8 and 10 machines, Windows places a flag in the tile of an app, causing Windows to notify the user of a problem and directing the user to the Windows Store to reinstall. This flag is placed on the tile when the Threat Prevention scanner detects a threat in the path of an installed Windows Store app, and marks the application as:

  A. malicious.
  B. suspicious.
  C. questionable.
  D. tampered.
  A. malicious.

• Question 6:

  Which of the following is the benefit of a TIE server with regard to the Adaptive Threat Protection module?

  A. It communicates with McAfee GTI for file and certificate reputation for malicious code.
  B. It is required, and the Adaptive Threat Protection will only work with the TIE server.
  C. The Threat Protection cache flushes when the reputation rules change.
  D. The stored file and certificate reputations are locally stored, making the remediation automatically quicker.
  A. It communicates with McAfee GTI for file and certificate reputation for malicious code.

• Question 7:

  When creating an exploit prevention process exclusion, at least one identifier must be specified. Which of the following is an identifier?

  A. DEP
  B. MD5 hash
  C. API
  D. Caller module
  B. MD5 hash

• Question 8:

  A new ENS policy has been created and deployed, and a user contacts the help desk stating that a particular site is no longer accessible. Which of the following ENS Web Control policy categories is the culprit?

  A. Options
  B. Content Actions
  C. Browser Control
  D. Enforcement Messaging
  D. Enforcement Messaging

• Question 9:

  A company's security posture requires the ENS firewall to be enabled; however, the team is unsure of communication flows in the environment. In which of the following modes should the ePO administrator deploy the firewall policy to achieve flow awareness?

  A. Adaptive Mode
  B. Interface Mode
  C. Enforce Mode
  D. Observe Mode
  B. Interface Mode

• Question 10:

  Exploit prevention content is released

  A. once per month.
  B. every other week.
  C. once per quarter.
  D. every two months.
  A. once per month.