McAfee McAfee Certified Product Specialist MA0-107 Questions & Answers

• Question 31:

  Which of the following groups of legacy products can be migrated to ENS 10.5?

  A. VirusScan Enterprise, Host Intrusion Prevention, and SiteAdvisor Enterprise

  B. Host Intrusion Prevention, SiteAdvisor Enterprise, and Data Loss Prevention

  C. VirusScan Enterprise, Host Intrusion Prevention, and Data Loss Prevention

  D. Host Intrusion Prevention, SiteAdvisor Enterprise, and Application Control

  Correct Answer: C

• Question 32:

  A user goes to four different websites, each with a different rating. One of the four sites is blocked and unable to be accessed. Using default configuration to determine the rating, which of the following ratings does this site have?

  A. Gray

  B. Red

  C. Yellow

  D. Green

  Correct Answer: A

• Question 33:

  When presented with a file-reputation response prompt, which of the following should a user select when responding to the file-reputation prompt to prevent future prompting for the same file type?

  A. Do not show this prompt again.

  B. Remember this decision.

  C. Allow this selection.

  D. Whitelist this selection.

  Correct Answer: A

• Question 34:

  The ePO administrators have already tuned and configured dynamic application containment rules within the policy. In which of the following ways will dynamic application containment protect against malware once enforcement is enabled?

  A. The scan engine will learn the behavior of the application and send up to GT1 for analysis, and then receive an action to block all actions from the application's process.

  B. If an application's reputation is below the threshold while triggering a block rule and is not an excluded application, malicious behavior of the application will be contained.

  C. The ENS client will receive the reputation as "highly suspicious" from either the McAfee GTI or TIE server, and then immediately uninstall the application on the system.

  D. The adaptive threat protection scanner will send the file automatically to a preconfigured "Sandbox" folder and analyze the application for malicious features before use.

  Correct Answer: B

• Question 35:

  The security team wants to schedule an on-demand scan to run at noon every day for all workstations. However, the team would like to ensure system performance is not impacted because users may be working. Which of the following is a system utilization setting that meets this criteria?

  A. Below normal

  B. Low

  C. Scan only when the system is idle

  D. Normal

  Correct Answer: D

• Question 36:

  An administrator wants to know how many machines have exploit prevention enabled. Which of the following dashboards installed with ENS should the administrator look at?

  A. Endpoint Security: Environmental Health

  B. Endpoint Security: Threat Behavior

  C. Endpoint Security: Content Status

  D. Endpoint Security: Installation Status

  Correct Answer: C

• Question 37:

  The ePO administrator sees the ENS firewall has been disabled on an endpoint in ePO. The end user states that no changes were made to the McAfee products on the endpoint in question.

  Which of the following questions should the administrator ask the end user about the McAfee icon to validate that the ENS firewall might be disabled?

  A. Is the icon flashing/blinking?

  B. Has the endpoint emitted a notification/alert sound (e.g., an error sound)?

  C. Is there a notification bubble displayed in the system notification area?

  D. Is the icon a color gray with a red/white exclamation mark?

  Correct Answer: B

• Question 38:

  By default, an individual file is flushed from the Adaptive Threat Protection local reputation cache every:

  A. 7 days.

  B. 14 days.

  C. 30 days.

  D. 60 days.

  Correct Answer: D

• Question 39:

  Which of the following describes the role of a cloud-based Real Protect scanner?

  A. It sends environmental variables to the cloud for analysis.

  B. It sends potentially malicious code to the cloud for analysis.

  C. It sends behavior information to the cloud for analysis.

  D. It sends personally identifiable information to the cloud for analysis.

  Correct Answer: B

• Question 40:

  Which of the following components can the Endpoint Migration Assistant tool migrate?

  A. Deployment tasks

  B. Dashboards

  C. Server tasks

  D. Host IPS catalog

  Correct Answer: D