MA0-101 Exam Questions

Which command allows an off-line signature file download from a tftp server when connectivity to the Manager is unavailable?

Which of the following CLI commands removes trust between a sensor and manager, removes signatures and restores default port settings, but retains IP configuration?

Which port is correctly defined for the Alert Channel on the Network Security Manager?

In L3 mode, a sensor detects an L2 device based on which address?

Which of the following is the correct extension for a Sensor image imported into the Manager?

By default, sensors are configured to operate in which operating mode?

Which sensor action detects and drop attacks in real-time?

Reconnaissance Policies can be applied to which of the following sensor nodes?

Which port needs to be opened for Alert Viewer communication between Client and Manager through a firewall?

Identity Based Access Control cannot co-exist with which mode of NAC deployment on the same port?

Alert fillers can be applied lo which of the following sensor nodes?

Setting a threshold limit in order for the IPS to react if traffic volume exceeds this limit is an example of which type of detection method?

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

Which of the following commands will reestablish the Alert and packet log channel connection between the sensor and manager?

Policies can be configured to drop packets when which of the following has been defined?

Which CLI command is used to copy sensor SSL certificates from external flash when replacing a failed sensor?

In double VLAN tagging, a second VLAN tag that is inserted into the frame is referred to as which of the following?

____________________are required to be configured before configuring the quarantine/pre- admission user classes or the quarantine DHCP server.

Which of the following activities require a reboot of a sensor? (Choose three)

Which attack cannot be blocked when the sensor has been set for in-line mode?

Which domains does a Super User have full rights to access?

_____________________are a set of Access Control List (ACL) rules that define network access provided to a host, subject to Network Access Control.

When McAfee NAC reports the host status as unmanaged with an Unknown Hearth Level, the sensor redirects the host to which of the following?

As a recommended best practice, what is the total number of sensors that should be managed through a single Network Security Manager installation?

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Which of the following CLI commands will not cause an automatic reboot of the Sensor?

Select the deployment method which enables the most effective Protection/Prevent on mode of operation.

Setting a threshold to allow an IPS to react when traffic volume exceeds the set limit is an example of what type of detection method?

DoS detection is implemented in which of the following modes? (Choose two)

Which of the following information is unique to Host Intrusion Prevention alerts? (Choose three)

Which server type needs to be configured as a requirement before the Quarantined user classes and Quarantined DHCP server(s) are configured?

What is the CLI command that enables the output of the MAC/IP address mapping table to the sensor debug files?

When creating policies, which of the following rule sets are available for selection within those policies?

Which port needs to be opened for install Channel communication between Sensor and Manager through a firewall?

Which CLI command is used to determine that the Sensor has established trust with the Manager?

Performance debugging mode can be enabled on a sensor for a specified time duration by issuing which of the following CLI commands?

What type of encryption is used for packet log transfers between the Sensor and the Manager?

Which of the following CLI commands only removes trust between a sensor and manager?

Which of the following rules do sub-interfaces inherit when they are created?

What is the command to enable the sensor to forward all traffic at Layer 2 if a failure occurs?