Intel Security Certified Product Specialist (MA0-104) Practice Test

Questions # 1:

The McAfee SIEM solution satisfies which of the following compliance requirements?

Options:

Continuous monitoring, Log retention

Personally Identifiable Information (Pll) protection

Payment Card Industry/ Data Security Standard {PCI/ DSS) protection

Patch management automation

Questions # 2:

The normalization value assigned to each data-source event allows

Options:

increased usability via views based on category rather than signature ID

more efficient parsing of each event by the McAfee SIEM Receiver.

quicker ELM searches

the McAfee ESM database to retain fewer events overall.

Questions # 3:

In the context of McAfee SIEM, the local protected network address space is a variable referred to as.

Options:

TRUSTED_NET

INTERNAL_NET

EXTERNAL_NET

HOME_NET

Questions # 4:

The McAfee Enterprise Security Manager (ESM) system clock is set to

Options:

International Date Line West.

Daylight Savings Offset.

Greenwich Mean Time.

Geo-Location.

Questions # 5:

Which of the following is the name of the Dashboard View that shows correlated events for the selected Data Source?

Options:

Default Summary

Normalized Dashboard

Incidents Dashboard

Triggered Alarms

Questions # 6:

Which of the following is the Primary function of the Event Receiver (ERC) in relation to the Enterprise Security Manager (ESM)?

Options:

Collect and parse events before the ESM pulls them form the ERC

Collect and parse the events before the receiver forwards them to the ESM

Collect and store the events before they are forwarded to the ESM for parsing

Collect and parse the events before forwarding them to the ELM

Questions # 7:

The fundamental purpose of the Receiver Correlation Subsystem (RCS) is

Options:

to analyze data from the ESM and detect matching patterns.

to collect and consolidate identical data from the ESM into a single summary event.

to classify or categorize data from the Receiver into related types and sub-types.

to organize, retrieve and archive data from the Receiver into the SIEM database.

Questions # 8:

Analysts can effectively use the McAfee SIEM to identify threats by ?

Options:

focusing on aggregated and correlated events data.

disabling aggregation, so all data are visible.

studying ELM archives, to analyze the original data

use the streaming event viewer to analyze data.

Questions # 9:

In the Default Summary view on the Enterprise Security manager (ESM). which of the following panels shows the baseline averages?

Options:

Event Summary

Normalized Event Summary

Event Distribution

Baseline Average

Questions # 10:

Checkpoint firewalls provide logs to the McAfee SIEM Receiver in which of the following formats?

Options:

Syslog

open Platform for Security (OPSEC)

McAfee Event Format (MEF)

Common Event Format (CEF)

Viewing page 1 out of 3 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the McAfee ISCPS SIEM MA0-104 Questions and answers with ExamsMirror

Exam MA0-104 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES