McAfee McAfee Certified Product Specialist MA0-107 Questions & Answers

• Question 51:

  A user navigates to a new website that has not been rated by ENS Web Control yet. In which of the following ways will ENS Web Control handle this request by default?

  A. Delete

  B. Block

  C. Allow

  D. Warn

  Correct Answer: C

• Question 52:

  An administrator wants to see more details about recent activity on an endpoint than what is shown in the ENS console. In which of the following locations can the administrator view the log files?

  A. %ProgramFiles%\McAfee\Logs

  B. %ProgramFiles%\McAfee\Endpoint Security\Logs

  C. %ProgramData%\McAfee\Endpoint Security\Logs

  D. %ProgramData%\McAfee\Logs

  Correct Answer: C

• Question 53:

  While tuning the firewall policy, the ePO administrator notices unauthorized traffic is being initiated by a file transfer utility application. If this is a recently approved application, in which of the following locations should this be configured to allow FTP traffic only with this application?

  A. Add a new rule within the Access Protection policy to block port 21 and exclude the executable for the software.

  B. Put a new rule in the Exploit Prevention policy to include the executable for the software for additional protection.

  C. Exclude the process associated with the software within the On Access Scan policy's Low-Risk Processes section.

  D. Create an allow rule within the Rules policy for inbound/outbound on port 21 and the executable for the software.

  Correct Answer: A

• Question 54:

  After installing ENS on a server, the server administrator finds that a specific application runs very slow, yet communication flows are still present. Which of the following remediation steps should the administrator take?

  A. Remove an exclusion.

  B. Create a whitelist.

  C. Create an exclusion.

  D. Remove a whitelist.

  Correct Answer: C

• Question 55:

  An administrator suspects that Self Protection is preventing local installation of a patch. Which of the following log levels should the administrator review?

  A. Event logging

  B. Debug logging

  C. Activity logging

  D. High severity logging

  Correct Answer: D

• Question 56:

  After enabling a timed group in the firewall policy, in which of the following ways does the user enable the group?

  A. Moving the mouse to the upper-right corner of the screen

  B. Running MFEtime.exe from the start menu

  C. From the McAfee system tray icon

  D. Inside the ENS console

  Correct Answer: C

• Question 57:

  Which of the following server roles has a McAfee-defined policy bundled with the product?

  A. Exchange

  B. Internet Information Services (IIS)

  C. Active Directory

  D. SQL

  Correct Answer: B

• Question 58:

  An ePO administrator decides to define a trusted network in the firewall policy. This will result in:

  A. an inbound directional allow rule for that remote network.

  B. an outbound directional allow rule for that remote network.

  C. a bidirectional allow rule for that remote network.

  D. a bidirectional deny rule for that remote network.

  Correct Answer: A

• Question 59:

  A. DEP

  B. MD5 hash

  C. API

  D. Caller module

  Correct Answer: B

• Question 60:

  Which of the following items are sent to the cloud when Real Protect scanning is enabled on endpoints that are connected to the Internet?

  A. System information

  B. Running process

  C. Behavioral information

  D. File reputation

  Correct Answer: B