McAfee MA0-107 Online Practice Questions and Exam Preparation

McAfee MA0-107 Online Questions & Answers

• Question 51:

  Which of the following is the MAIN benefit of using Threat Intelligence Exchange (TIE) and Data Exchange Layer (DXL)?

  A. They enable centralized management of adaptive-threat-protection policies.
  B. They store and pass file reputation to managed endpoints and McAfee products.
  C. They distribute signature-based content to managed systems.
  D. They conduct scanning of files on managed systems for threats.
  B. They store and pass file reputation to managed endpoints and McAfee products.

• Question 52:

  An administrator wants to add executables that are monitored with the Exploit Prevention engine. To which of the following policy sections should the executables be added?

  A. Generic privilege escalation prevention
  B. Exclusions
  C. Signatures
  D. Application protection rules
  A. Generic privilege escalation prevention

• Question 53:

  A security technician is configuring the exploit prevention policy. Based on best practices for critical servers, which of the following severity levels should the technician configure signatures to block after a requisite period of tuning?

  A. Low
  B. High
  C. Informational
  D. Medium
  B. High

• Question 54:

  In which of the following locations are the installation log files stored by default on a Windows machine?

  A. %TEMP%\McAfeeLogs
  B. %PROGRAMDATA%\McAfee\Logs
  C. %USERDATA%\McAfeeLogFiles
  D. %PROGRAMFILES%\CommonFiles\McAfeeLogs
  C. %USERDATA%\McAfeeLogFiles

• Question 55:

  The organization's desktop engineering team wants to include ENS 10 within their desktop imaging process. They would like to install all modules silently. Which of the following is the correct command-line syntax to accomplish this task?

  A. setupEP.exe ADDLOCAL="all" /qb!
  B. setupEP.exe ADDLOCAL="all" /qn
  C. setupEP.exe ADDLOCAL="fw,tp,wc" /qb!
  D. setupEP.exe ADDLOCAL="fw,tp,wc" /qn
  C. setupEP.exe ADDLOCAL="fw,tp,wc" /qb!

• Question 56:

  An administrator is running new software, and a file is detected by the On-Access scanner as a Potentially Unwanted Program. In which of the following ways can the administrator prevent the file from being detected?

  A. Adding the process name within standard process settings
  B. Excluding by detection name
  C. Adding to Potentially Unwanted Program Detections.
  D. Configuring low-risk settings and low risk the software
  C. Adding to Potentially Unwanted Program Detections.

• Question 57:

  When configuring the Adaptive Threat Protection Options policy, which of the following is a rule assignment group that needs to be selected to accommodate an environment consisting of high-change systems with frequent installations and updates of trusted software?

  A. Adaptive
  B. Productivity
  C. Balanced
  D. Security
  D. Security

• Question 58:

  The network operations team has configured the company's VPN connector to deny connectivity if virus scan definitions are older than seven days. In order for a user to immediately meet the VPN connector's policy, which of the following should the administrator enable?

  A. Managed custom tasks
  B. "Update now" button
  C. Default client update task schedule
  D. Proxy server
  A. Managed custom tasks

• Question 59:

  The ePO administrator sees the ENS firewall has been disabled on an endpoint in ePO. The end user states that no changes were made to the McAfee products on the endpoint in question. Which of the following questions should the administrator ask the end user about the McAfee icon to validate that the ENS firewall might be disabled?

  A. Is the icon flashing/blinking?
  B. Has the endpoint emitted a notification/alert sound (e.g., an error sound)?
  C. Is there a notification bubble displayed in the system notification area?
  D. Is the icon a color gray with a red/white exclamation mark?
  B. Has the endpoint emitted a notification/alert sound (e.g., an error sound)?

• Question 60:

  An administrator suspects that Self Protection is preventing local installation of a patch. Which of the following log levels should the administrator review?

  A. Event logging
  B. Debug logging
  C. Activity logging
  D. High severity logging
  D. High severity logging