McAfee MA0-107 Online Practice Questions and Exam Preparation

McAfee MA0-107 Online Questions & Answers

• Question 31:

  An ePO administrator wants to enable script scanning in the environment; however, the administrator wants to exclude several custom scripts from being scanned. Which of the following is the BEST practice for script scan exclusions?

  A. Ensure wildcard characters are fully supported.
  B. Use fully qualified domain names and NetBIOS names.
  C. Include port numbers if they are part of the address.
  D. Keep the URL short.
  B. Use fully qualified domain names and NetBIOS names.

• Question 32:

  After installing ENS on a server, the server administrator finds that a specific application runs very slow, yet communication flows are still present. Which of the following remediation steps should the administrator take?

  A. Remove an exclusion.
  B. Create a whitelist.
  C. Create an exclusion.
  D. Remove a whitelist.
  C. Create an exclusion.

• Question 33:

  An administrator wants to know how many machines have exploit prevention enabled. Which of the following dashboards installed with ENS should the administrator look at?

  A. Endpoint Security: Environmental Health
  B. Endpoint Security: Threat Behavior
  C. Endpoint Security: Content Status
  D. Endpoint Security: Installation Status
  C. Endpoint Security: Content Status

• Question 34:

  An ePO administrator decides to define a trusted network in the firewall policy. This will result in:

  A. an inbound directional allow rule for that remote network.
  B. an outbound directional allow rule for that remote network.
  C. a bidirectional allow rule for that remote network.
  D. a bidirectional deny rule for that remote network.
  A. an inbound directional allow rule for that remote network.

• Question 35:

  A help desk technician needs to gain admin rights to the ENS local client interface for troubleshooting. Which of the following is a policy setting within the ENS Common Options policy that could be used to temporarily allow admin rights to the local client?

  A. Unlock Client Interface Password
  B. Standard Access
  C. One-time Password
  D. Time-based Password
  A. Unlock Client Interface Password

• Question 36:

  An ePO administrator needs to add exclusions for a folder. The folder has been created in several locations, including C:\Program Files\Custom\Acme or C:\Program Files\Acme, but the folder could be located in other subfolders in the Program Files folder.

  Which of the following is the correct way to write an exclusion for the Acme folder?

  A. \Program Files\?\Acme
  B. \Program Files\**\Acme
  C. \Program Files\*\Acme
  D. \Program Files\??\Acme
  C. \Program Files\*\Acme

• Question 37:

  Which of the following items are sent to the cloud when Real Protect scanning is enabled on endpoints that are connected to the Internet?

  A. System information
  B. Running process
  C. Behavioral information
  D. File reputation
  B. Running process

• Question 38:

  A user goes to four different websites, each with a different rating. One of the four sites is blocked and unable to be accessed. Using default configuration to determine the rating, which of the following ratings does this site have?

  A. Gray
  B. Red
  C. Yellow
  D. Green
  A. Gray

• Question 39:

  A hospital in another county just received a new variant of ransom ware that infected 70% of its systems. After learning the characteristics of this ransom ware, the security team wants to implement a protection policy to stop certain files from being modified and new registry keys from being created that are relevant to the ransom ware. Which of the following policies meets this requirement?

  A. Exploit prevention policy
  B. Block and allow list policy
  C. Access protection policy
  D. Firewall rules policy
  C. Access protection policy

• Question 40:

  An administrator wants to exclude folder ABC on various drives. In which of the following ways should the administrator list the exclusion in the policy?

  A. ??\ABC
  B. **\ABC
  C. ***\ABC
  D. ???\ABC
  C. ***\ABC