MA0-101 Exam Questions

Which of the following are the methods used by NSP to recognize and react to Denial-of- Service (DoS) attacks? (Choose three)

Which command is used to manually download signature tiles from the tftpserver when connectivity to the Manager is not available?

What is the command to force the sensor out of Layer 2 Passthru mode?

Which type of NAC configuration allows a host to be subjected to both DHCP and IBAC based NAC when configured on different ports?

A sensor is placed in-line and is dropping traffic. This situation demands an immediate removal of the sensor from the network to let traffic flow uninterrupted. Which option will...

A Sensor allows the option of Layer2 forwarding for which of the following?

________________allows a host to be subjected to both DHCP based NAC and Identity Based Access Control when configured on different ports.

Which of the following formats can query results be exported into?(Choose two)

The replication types used in updating distributed repositories are:

The option available for the McAfee Default Policy is?

Which is the correct syntax for the 'set dosprevenbonseverity' command?

When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Which of the following deployment modes is not included in standard NAC?

Which of the following methods are available for upgrading a Sensor image?

Which port needs to be opened for Alert Channel communication between Sensor and Manager through a firewall?

Which policy is assigned to a child domain by default?

A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as "unmanaged with an Unknown Health Level"?

Which mode is used when certain hosts are located on the same network as a sensor and other hosts enter through a router or VPN?

Identity Based Access Control cannot co-exist with which mode of NAC deployment on the same port?

Which of the following is the proper step to take if an IP address change is made to the server where the Network Security Manager has been installed?

A Reconnaissance Policy can be applied to which of the following?

How are packet logs viewed from within the Manager?

Which command can be issued on a Sensor to check the health of the Sensor?

What type of encryption is used for file transfers between the Sensor and the Manager?

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

IPS Policies can be enforced at which of the following sensor nodes?

Which of the following items can an ACL not match?

Setting a threshold on a sensor to react if traffic volume exceeds the threshold limit is an example of what specific detection method?

Which NSP sensor models support SSL encryption? (Choose three)

Which sensor action allows the detection and dropping of attacks in real-time?

Why is the DBAdmin tool considered a preferred method of performing system maintenance tasks that could be performed within the Manager?

Which step needs to be completed before a sensor can be configured?

Which of the following cannot be configured at the sub-interface level?

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

If the Health Level of the host cannot be determined, which of the following System Health Levels would be assigned?

Which NSP sensor models support VLAN Bridging? (Choose three)

Which port needs to be opened for Packet Log Channel communication between Sensor and Manager through a firewall?

If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

Which mode needs to be set to redirect an unmanaged system to the guest portal?

Which of the following are considered part of the Operational mode of System Health- based NAC? (Choose three)

Which of the following are the different operational modes of System Health based NAC? (Choose three)

When placed in Layer3 mode, a Sensor detects a Layer2 device based on which of the following?

Which logs are used to determine who was logged into the Manager the last time a signature set update was pushed from the Manager to the Sensor?

Which database is supported for Network Security Manager?

Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

McAfee recommends which of the following methods to cable the heartbeat connection of a sensor failover pair?

Why would attacks not be blocked when the Sensor monitoring ports are configured in SPAN mode?

Which of the following options is the best practice to use if you need to edit all attacks with a specific seventy number within an IPS policy?

Malware Protection requires which of the following feature or features to be enabled?

Which of the following actions can a Standby Manager of an MDR pair perform?