McAfee Certified Product Specialist- HIPs (MA0-102) Practice Test

Questions # 1:

When creating a User Defined signature, Rule Definitions can be based on which of the following criteria? (Select the three that apply)

Options:

Windows and UNIX Files and Directories

Windows Registry Keys

Windows Registry Hive

Windows Services

Windows and UNIX ports

Questions # 2:

Why is it recommended lo change the agent-to-server and console-to-server communication ports from their default values during installation?

Options:

These ports are commonly subjected to malicious exploitation

The default values are in the common domain

The default ports may already be in use inside of the network

To avoid technical issues with port allocation

Questions # 3:

When applying a patch or service pack to systems on the network, what is the recommended HIPs protection policy that is used for enforcement?

Options:

Adaptive Mode

Warning

Basic Protection

Enhanced Protection

Questions # 4:

Which of the following statements about Adaptive Mode are correct?

Options:

Adaptive Mode triggers IPS events

Adaptive Mode blocks all activity

Adaptive Mode blocks all activity except malicious exploits

Adaptive Mode triggers IPS alerts

Questions # 5:

Which of the following are the accepted methods of creating exceptions? (Select the two that apply)

Options:

Evasion tool

ClientException utility

Manually

Adaptive Mode

Learn Mode

Questions # 6:

Which of the following operating systems does HIPs for Windows not support?

Options:

Windows XPSP 3 32-bit

Windows XPSP 3 64-bit

Windows 7 64-bit

Windows 2008 64-bit

Questions # 7:

Which of the following files is appended under each managed with disabled event information?

Options:

EvtFiltr.ini

Agent_Event.xml

EvtForward.ini

AgentEvent.log

Questions # 8:

Which of the following policy categories are considered to be mufti-slot policies? (Select the two that apply)

Options:

Trusted Application

IPS Rules

Firewall Rules

IPS Protection

IPS Options

Questions # 9:

n order to tighten a system's intrusion prevention when using Host IPS, when should Adaptive Mode be disabled?

Options:

Adaptive Mode should never be disabled

Adaptive Mode should be disabled after the tuning period is over

Adaptive Mode should be disabled during the tuning period

Adaptive Mode should be disabled before the pilot period has begun

Questions # 10:

Which of the following are the listed signature severity levels within HIPs? (Select the four that apply)

Viewing page 1 out of 3 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the McAfee Other Certification MA0-102 Questions and answers with ExamsMirror

Exam MA0-102 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES