McAfee MA0-107 Online Practice Questions and Exam Preparation

McAfee MA0-107 Online Questions & Answers

• Question 61:

  An ENS administrator is configuring on-access protection but finds the trusted backup tool is causing an unneeded performance impact. Which of the following actions should the administrator take?

  A. Endpoint Security Threat Prevention Policy Category / Threat Prevention Policy Category / Access Protection / Exclusion / Exclude the Backup Tool executable
  B. Endpoint Security Threat Prevention Policy Category / Exploit Prevention/Exclusions / Exclude Backup Tool executable
  C. Endpoint Security Threat Prevention Policy Category / On Access scan / Process Settings / Low Risk Processes / Exclude Backup Tool executable
  D. Enable McAfee GTI Feedback under Endpoint Security Threat Prevention Policy Category / Options / Proactive Data Analysis
  C. Endpoint Security Threat Prevention Policy Category / On Access scan / Process Settings / Low Risk Processes / Exclude Backup Tool executable

• Question 62:

  An administrator notices that on one endpoint, Threat Prevention is not currently on the latest version of AMContent. The administrator presses the "Update Now" button within the console, but a message shows the update was unsuccessful. Which of the following logs should the administrator look at FIRST to troubleshoot the failure?

  A. EndpointSecurityPlatform_Activity.log
  B. ThreatPrevention_Activity.bg
  C. AccessProtection_Activity.log
  D. PackageManager_Activity.log
  D. PackageManager_Activity.log

• Question 63:

  Which of the following server roles has a McAfee-defined policy bundled with the product?

  A. Exchange
  B. Internet Information Services (IIS)
  C. Active Directory
  D. SQL
  B. Internet Information Services (IIS)

• Question 64:

  In which of the following ways would ATP determine the reputation information if Adaptive Threat Protection (ATP) is deployed and neither a TIE server nor an Internet connection is available?

  A. ATP will use information from the local system.
  B. ATP will query other systems in the environment.
  C. ATP will do nothing and auto-disable itself.
  D. ATP will prompt the user for manual input.
  B. ATP will query other systems in the environment.

• Question 65:

  After enabling a timed group in the firewall policy, in which of the following ways does the user enable the group?

  A. Moving the mouse to the upper-right corner of the screen
  B. Running MFEtime.exe from the start menu
  C. From the McAfee system tray icon
  D. Inside the ENS console
  C. From the McAfee system tray icon

• Question 66:

  While tuning the firewall policy, the ePO administrator notices unauthorized traffic is being initiated by a file transfer utility application. If this is a recently approved application, in which of the following locations should this be configured to allow FTP traffic only with this application?

  A. Add a new rule within the Access Protection policy to block port 21 and exclude the executable for the software.
  B. Put a new rule in the Exploit Prevention policy to include the executable for the software for additional protection.
  C. Exclude the process associated with the software within the On Access Scan policy's Low-Risk Processes section.
  D. Create an allow rule within the Rules policy for inbound/outbound on port 21 and the executable for the software.
  A. Add a new rule within the Access Protection policy to block port 21 and exclude the executable for the software.

• Question 67:

  In Web Control, "Enable Web Category blocking of restricted content" is enforced. Which of the following describes the result if a user enters a restricted site?

  A. The color is gray, and access is denied.
  B. The pop-up color is red, and access is denied.
  C. The color is orange, and access is denied.
  D. The pop-up color is blue, and access denied.
  C. The color is orange, and access is denied.

• Question 68:

  Joe, an administrator, runs a policy-based, on-demand scan on a system and notices that after the scan, a threat event was created for what appears to be a false positive. Joe wants to submit the file for analysis to McAfee Labs; but every time he accesses the file, it is detected.

  In which of the following default locations can Joe find the backups of the detected files?

  A. %ProgramData%\McAfee\Common Framework\AgentEvents
  B. C:\Quarantine
  C. C:\Windows\Temp\Quarantine
  D. %deflogfir%\Quarantine
  A. %ProgramData%\McAfee\Common Framework\AgentEvents

• Question 69:

  Which of the following components can the Endpoint Migration Assistant tool migrate?

  A. Deployment tasks
  B. Dashboards
  C. Server tasks
  D. Host IPS catalog
  D. Host IPS catalog

• Question 70:

  The security team wants to schedule an on-demand scan to run at noon every day for all workstations. However, the team would like to ensure system performance is not impacted because users may be working. Which of the following is a system utilization setting that meets this criteria?

  A. Below normal
  B. Low
  C. Scan only when the system is idle
  D. Normal
  D. Normal