McAfee MA0-107 Online Practice Questions and Exam Preparation

McAfee MA0-107 Online Questions & Answers

• Question 41:

  The security team has requested that adaptive threat protection be integrated with a TIE server. Which of the following is required?

  A. Data Exchange Layer
  B. Advanced Threat Defense
  C. Event Security Manager
  D. Active Response
  A. Data Exchange Layer

• Question 42:

  Which of the following describes the difference in functionality between Real Protect cloud-based and Real Protect client-based?

  A. The location where the centralized management server and policies are managed
  B. The location from which AMCore content updates are pulled before on-demand scans
  C. The location where the scanning is conducted on file attributes and behavior
  D. The location where malware is quarantined on the managed system
  A. The location where the centralized management server and policies are managed

• Question 43:

  By using which of the following techniques does Real Protect scanner inspect suspicious files and activities on an endpoint to detect malicious patterns?

  A. Machine learning
  B. Intrusion prevention
  C. Sandboxing
  D. Static code analysis
  B. Intrusion prevention

• Question 44:

  For which of the following reasons does ENS 10 store two previous versions of AMCore content?

  A. To allow for content rollback if it is needed
  B. To allow for comparison of detections between content versions
  C. To allow for backup when an Extra.DAT is deployed
  D. To allow for choice of which content to scan a file against
  C. To allow for backup when an Extra.DAT is deployed

• Question 45:

  Which of the following methods should an administrator enable to address possible buffer overflow conditions?

  A. On-demand Scan
  B. Exploit Prevention
  C. Access Protection rules
  D. McAfee GTI feedback
  B. Exploit Prevention

• Question 46:

  If the ePO server's access to the Internet is allowed, which of the following options would the administrator have to check in the McAfee ENS Migration Assistant extension?

  A. Software Manager
  B. Server Client Package Install
  C. Master Repository
  D. Workstation Client Package Install
  C. Master Repository

• Question 47:

  A user navigates to a new website that has not been rated by ENS Web Control yet. In which of the following ways will ENS Web Control handle this request by default?

  A. Delete
  B. Block
  C. Allow
  D. Warn
  C. Allow

• Question 48:

  A security professional is configuring ENS for a client and wants to ensure applications will be prevented from executing software locally from the browser or email client. Which of the following McAfee-defined rules should be implemented?

  A. Creating new executable files in the Windows folder
  B. Installing browser helper objects or shell extensions
  C. Registering programs to autorun
  D. Running files from common user folders by common programs
  B. Installing browser helper objects or shell extensions

• Question 49:

  Organizational security policy has recently mandated users be made aware of potentially malicious links. Which of the following features of ENS 10.5 can be used to accomplish this task?

  A. Rating Actions
  B. Sensitivity Level
  C. Event Logging
  D. Browser Control
  D. Browser Control

• Question 50:

  The ENS administrator wants to monitor remotely the modification of files, but BigFix.exe is generating many false positives. Which of the following should the ENS administrator do?

  A. Exclude the file under Threat Prevention / Access Protection / Remotely creating or modifying Files or Folders.
  B. Add the file as a High Risk Process under Threat Prevention / On Access Scan / Process settings.
  C. Exclude the file under Common Options / Self Protection.
  D. Add the file under Threat Prevention / Options/ Exclusions by detection name.
  C. Exclude the file under Common Options / Self Protection.