Mcafee epo. Number: MA0-100 Passing Score: 800 Time Limit: 120 min File Version: 1.0

Size: px

Start display at page:

Download "Mcafee epo. Number: MA0-100 Passing Score: 800 Time Limit: 120 min File Version: 1.0"

Kristian Ward
6 years ago
Views:

1 Mcafee epo Number: MA0-100 Passing Score: 800 Time Limit: 120 min File Version: McAfee MA0-100 McAfee Certified Product Specialist-ePO Practice Test Version: 4.0

2 Exam A QUESTION 1 1 Which of the following uses a proprietary SPIPE protocol to encapsulate unsecured HTTP traffic? A. PA Agent B. HIPS Agent C. DLP Agent D. McAfee Agent /Reference: QUESTION 2 2 Which of the following is a core architecture component of epo? A. Internet Explorer B. Event Parser C. Active Directory D. Agent Handler /Reference: QUESTION 3 3 What option can be configured in the On-Access General Policy that is not an option in the local VirusScan console? A. Boot sectors B. Floppy during shutdown C. Enable on-access scanning at system startup D. Enable on-access scanning when the policy is enforced /Reference: QUESTION Which of the following system properties does the epo server write to the database? Select the three that apply. A. Total disk space B. Total physical memory

3 C. Last communication D. VirusScan version E. McAfee agent version Correct Answer: ABC /Reference: QUESTION 5 5 To ensure that a Rogue System Detection Sensor is not installed on a managed system, what action needs to be performed? A. Add the system to the Exception List B. Add the system to the Blacklist C. Add the system as Ignored D. Add the system as Managed /Reference: QUESTION 6 6 The epo server uses which format to write to the database tables? A. Extensible Configuration Checklist Description Format (XCCDF) B. Common Events Format (CEF) C. Security Content Automation Protocol Format (SCAP) D. Data Access Layer (DAL) /Reference: QUESTION When configuring a Synchronization Type for a group within the System Tree which of the following is a valid choice? Select the three that apply. A. Leave systems in their current system tree location only

4 B. Add systems to the synchronized group and leave them in the current system tree location C. Add systems to the synchronized group and delete duplicate entries D. Add systems to the synchronized group and mark duplicate entries E. Move systems from their current system tree location to the synchronized group Correct Answer: ABE /Reference: QUESTION 8 8 Which of the following are examples of default column headers on the Server Task area of the interface? Select the two that apply. A. Description B. Duration C. Name D. Source E. Status Correct Answer: CE /Reference: QUESTION 9 9 Which options must be selected when creating a maintenance plan for the SQL Database? Select the three that apply. A. Shrink Database B. Check Database Integrity C. Rebuild Index D. Clean Up History E. Back Up Database CE /Reference: 4 QUESTION If you specify the McAfee Agent Policy to collect only minimal properties, the agent collects only which of the following? Select the two that apply. A. Installed software information B. DAT file version number C. Processor speed D. Installation path E. Operation system

5 D /Reference: QUESTION What is the default number of sensors that will be active per subnet? A. 1 B. 2 C. 3 D. 4 /Reference: QUESTION A Subnet that has a Rogue System Detection Sensor installed is A. active B. inactive C. uncovered D. covered /Reference: 5 QUESTION Which of the following are valid server tasks for updating the epo repositories? Select the two that apply. A. Repository pull B. Update C. Repository replication D. Mirror E. Product deployment Correct Answer: AC /Reference: QUESTION Which of the following is used to create a policy? Select the two that apply.

6 A. Copy B. Duplicate C. Clone D. New Policy E. Save As D /Reference: QUESTION What options are available to the administrator when creating a client task to limit the systems that receive the task? A. Tasks can only be assigned globally B. Tasks can only be assigned to a specific group C. Task can be configured with defined criteria D. Task can be enabled when the desired systems are online Correct Answer: C /Reference: 6 QUESTION Deployment packages that are checked into the epo server have which of the following file extension? A..arc B..rar C..zip D..jar Correct Answer: C /Reference: QUESTION When creating a new query, what is the function title used to limit the resulting output? A. Result type B. Chart C. Filter D. Columns Correct Answer: C

7 /Reference: QUESTION Which of the following types of distributed repositories is supported by epo? Select the three that apply. A. HTTP B. FTP C. UNC D. DHCP E. LDAP 7 Correct Answer: ABC /Reference: QUESTION If a policy that is assigned to the My Organization group is deleted, what policy is assigned in its place? A. McAfee Default B. Parent Group C. My Default D. Global Root Correct Answer: A /Reference: QUESTION When running a Run Tag Criteria server task and the box for Reset manually tagged and excluded systems box is checked, this would A. include both systems that match and don t match B. remove the tag on systems that do match the criteria C. add the tag on systems thatdon tmatch the criteria D. remove the tag on systems thatdon tmatch the criteria. /Reference: QUESTION 21

8 21 Which of the following server services is responsible for communication with the McAfee Agent? A. Apache B. Tomcat C. SQL D. Event Parser 8 Correct Answer: A /Reference: QUESTION Which of the following are valid Automatic Query Actions that can be selected from a result of a query? Select the three that apply. A. Install Point Products B. Assign Policy C. Move Systems to another Group D. File E. Remove Point Products CD /Reference: QUESTION Which of the following should be the primary consideration when deploying Agent Handlers? A. Database increasing in size B. Log files increasing in size C. Memory and resource allocation D. High speed and low latency connection /Reference: QUESTION When creating a permission set, which of the following users are automatically assigned? Select the two that apply. A. Admin B. Group Admin C. System

9 D. Global Administrator 9 E. Global Reviewer Correct Answer: AC /Reference: QUESTION Which of the following are used to update the master repository on a regular basis? A. Automatic Response B. Client Task C. Server Task D. Server Settings Correct Answer: C /Reference: QUESTION In which area of the console is the System Tree Sorting enabled? A. Server Settings B. Client tasks C. Sorting Criteria D. Assigned Policies Correct Answer: A /Reference: QUESTION Query results are displayed within epo in what form? Select the two that apply. A. PDF B. Charts C. XML D. Tables E. TXT 10 D

10 /Reference: QUESTION What port is used to access the McAfee Agent Activity Log from a remote machine? A. 80 B. 443 C D Correct Answer: C /Reference: QUESTION What default port is used for Rogue System Detection Sensors for communication to the epo server? A B C D /Reference: QUESTION What is used to configure the SQL server to drop the transaction logs once a checkpoint is complete? A. Full B. Simple C. Bulk-Logged D. Recovery 11 /Reference: QUESTION To remove computers from epo using the Active Directory Synchronization task, it is required that the account has access to the

11 A. deleted computers. B. deleted Objects container. C. Organizational Unit. D. Active Directory. /Reference: QUESTION When configuring Product Deployment Client Tasks, the Enable randomization setting should be activated when managed client nodes exceed A B C D /Reference: QUESTION Where in the epo database is the epo Agent gathered system information stored? A. epocomputerproperties B. epobranc C. epoleafnode D. epoproductproperties 12 Correct Answer: A /Reference: QUESTION What location is used to change the default Dashboard for new epo Console users? A. Personal Settings B. Permission Sets C. Contacts D. Server Settings

12 /Reference: QUESTION When configuring the Active Directory settings, exceptions can include which of the following? A. Organizational Units B. Computers C. Domain Groups D. Users Correct Answer: A /Reference: QUESTION Which of the following is the correct order for creating a query? A. Configure Chart, choose Columns, select Result Type, apply Filter B. Select Result Type, choose Columns, configure Chart, apply Filter C. Configure Chart, select Result Type, choose Columns, apply Filter D. Select Result Type, configure Chart, choose Columns, apply Filter /Reference: 13 QUESTION Which of the following cannot be completed within the Policy Catalog? A. Edit B. Rename C. Duplicate D. Assign /Reference: QUESTION Which of the following can NOT be placed into a dashboard? A. Boolean pie chart B. Multi-group summary table C. Single-group summary table

13 D. Table /Reference: QUESTION When a policy is locked, it prevents modification of the A. policy B. assignment C. system tree D. sub groups /Reference: 14 QUESTION Which of the following are valid deployment package types? Select the two that apply. A. Catalog.z B. Agent Language pack C. Extradat D. Artemis pack E. epomain C /Reference: QUESTION Private queries are available to A. the creator B. GlobalAdministrators C. administrators who have permission D. Group Administrators Correct Answer: A /Reference: QUESTION 42 42

14 Which of the following steps are needed for Policy Sharing? Select the three that apply. A. Register the remote epo servers B. Share the individual policies C. Configure Server Task D. Enable Global Updating E. Share default policies Correct Answer: ABC /Reference: 15 QUESTION What detail property includes the local Time Zone value of a managed machine? A. VirusScan Enterprise Properties B. McAfee Agent Properties C. Host Intrusion Preventions Properties D. System Information Properties /Reference: QUESTION Which of the following Lost&Found group characteristics can be modified? A. Group Name B. Sorting Criteria C. Sorting Criteria for subgroups D. Tree location Correct Answer: C /Reference: QUESTION Which component controls the scheduled tasks and communicates with the common agent? A. Task Manager B. McShield C. Framework Service D. Scan32.exe Correct Answer: C

15 /Reference: QUESTION Which VirusScan policy configures the option Allow this system to make remote console connections to other systems? A. User interface B. On-Access Scanner C. Quarantine Manager D. Unwanted Programs Correct Answer: A /Reference: QUESTION When backing up an epo server, which of the following security keys is required to restore agent server communication? A. Local Master Repository Communication B. Agent Server Secure Communication C. Legacy Agent Server Communication D. McAfee SIA Repository Communication /Reference: QUESTION Why would a managed system appear in the Lost&Found group? A. No matching criteria were found B. Matched sorting criteria were found C. Inactive Agent D. Rogue Agent Correct Answer: A /Reference: QUESTION An RSD Sensor has been deployed from the epo console. However, it has not reported back.

16 Which of the following is the most likely cause? Select the three that apply. A. The sensor is unable to resolve the IP address for epo B. The sensor is blacklisted C. Deployment of the sensor failed D. Sensor service is disabled after installation E. The sensor is an exception Correct Answer: ACD /Reference: QUESTION Which of the following are examples of client tasks? Select the three that apply. A. Agent Wakeup B. Product Update C. Repository pull D. Mirror Repositories E. Event Migration Correct Answer: ABD /Reference: QUESTION Which of the following options are available from the epo Server settings? Select the three that apply. A. Ports B. Global Updating C. Event Migration D. Active Directory Synchronization E. Server Correct Answer: ABE /Reference: 18 QUESTION 52

17 52 Which two items are modified in the Full Scan Task when installing the Anti-Spyware module? Select the two that apply. A. Registry B. Cookies C. Running Process D. Recycle bin E. Memory for Rootkits Correct Answer: AB /Reference: QUESTION What VirusScan menu option is used to unlock the user interface? A. Task B. Edit C. View D. Tools /Reference: QUESTION Which policies can be configured to record the Session settings for reporting? Select the two that apply. A. On-Delivery Scan Policies B. On-Access Default Processes Policies C. On-Access General Policies D. Quarantine Manager Policies Correct Answer: AC /Reference: 19 QUESTION What function is disabled for the default epo Summary dashboard? A. Edit B. Delete C. Make active D. Make public

18 /Reference: QUESTION When opening an existing policy, the policy settings are organized across A. interfaces B. tabs C. screens D. columns /Reference: QUESTION An administrator can configure a query to run a scheduled sub-action to do which of the following? Select the two that apply. A. Resort Systems B. Create Tag C. Move Systems to Another Group D. Clear Policy E. Add to Rogue Systems Correct Answer: AC /Reference: 20 QUESTION Product deployment packages are checked into what repository? A. Distributed B. Master C. Fallback D. Source /Reference: QUESTION Which of the following are epo Server Maintenance tasks? Select the two that apply.

19 A. Master Repository Update Failed B. Purge Repository tasks C. Update sensor deployment D. Product License Usage E. Query New Rogue Detection Correct Answer: CD /Reference: QUESTION What Artemis sensitivity level is selected to protect systems or areas that are regularly infected? A. Low B. Medium C. High D. Very High Correct Answer: C /Reference: QUESTION Which of the following services is related to Super Agents? A. Framework B. Application Server C. Event Parser D. Tomcat Correct Answer: A /Reference: QUESTION What utility is used to create a custom VirusScan installation package that contains updated DAT and engine files? A. Deployment task B. Manual install C. Installation Designer D. MSI Installer Correct Answer: C

20 /Reference: QUESTION Which of the following options are available when right clicking a file and selecting Scan for threats? Select the two that apply. A. Clean B. Delete C. Continue D. Prompt for action E. Continue scanning Correct Answer: AC /Reference: QUESTION Which of the following ports need to be open on the Firewall for an Agent Handler to communicate with epo and database server(s) inside of a network? Select the two that apply. A. Port 80 B. Port 1433 C. Port 8082 D. Port 8081 E. Port 8445 Correct Answer: AB /Reference: QUESTION Which of the following are available within the Policy Catalog? Select the three that apply. A. Share B. Duplicate C. Assign D. View E. Lock Correct Answer: ABD /Reference:

21 QUESTION When a policy is deleted, all systems for which it is currently applied to will inherit which policy? A. McAfee Default B. Parent Group C. My Default D. Global Root /Reference: QUESTION An Alien Agent is a system that A. has not reported back to epo in the last 30 days. B. does not have a McAfee Agent installed. C. has the Agent Component disabled. D. is reporting to a different epo Server. /Reference: QUESTION Which of the following is a default permission set? A. Executive Previewer B. Site Administrator C. Site Reviewer D. Group Reviewer /Reference: QUESTION What file contains the list of disabled event ids? A. EventFilter.cfg B. EventFilter.ini C. Evtfiltr.ini D. Server.ini

22 Correct Answer: C /Reference: QUESTION Which of the following Server Services is responsible for Automatic Responses? 24 A. Event Parser B. Framework service C. Tomcat D. Apache Correct Answer: C /Reference: QUESTION Which of the following is an available default notification rule? A. Daily known category notification B. Virus detected and not removed C. Virus detected and removed D. Non-complaint computer detected /Reference: QUESTION What Artemis sensitivity level is selected when the regular risk of exposure to malware is greater than the risk of a false positive? A. Low B. Medium C. High D. Very High /Reference: QUESTION 73

23 73 Within the Server Services, which component manages events, Group management, Tag management, and Agent sorting? 25 A. Event Parser B. Framework service C. Tomcat D. Apache /Reference: QUESTION What scheduling options are available when setting up a Product Deployment Task? Select the three that apply. A. Enable Randomization B. Stop the task if it runs for a specified amount of time C. Run at every policy enforcement D. Defer scan when using battery power E. Run missed task at a specified time delay Correct Answer: ABE /Reference: QUESTION What protocol is used for secure communication between the McAfee Agent and server? A. IPSEC B. SPIPE C. SFTP D. HTTP /Reference: QUESTION Policy catalogue pages are added to the epo server by what function? 26 A. Adding a package to the Master Repository B. Installing an extension to the epo server

24 C. Registering a new server configuration D. Executing the appropriate packagecheckin.exe for that point product /Reference: QUESTION An epo server needs to have a dedicated SQL Server when managing more than A. 1,000 nodes. B. 5,000 nodes. C. 10,000 nodes. D. 20,000 nodes. /Reference: QUESTION When an on-demand scan starts, the feature takes CPU and IO samples over the first A. 20 seconds. B. 30 seconds. C. 40 seconds. D. 50 seconds. /Reference: QUESTION When managing tags what is NOT available in the System Tree? A. Clear Tag B. Exclude Tag 27 C. Apply Tag D. New Tag /Reference:

25 QUESTION When performing the On-Demand scan, what System utilization settings are affected? A. Cookie B. Registry C. Encrypted files D. Targeted files /Reference: QUESTION Which of the following are methods that can be used to access System Information? Select the two that apply. A. Open the computer property query under reports B. Click a computer in the system tree C. Select computer properties under system actions D. Open a query then click a computer in the report D /Reference: QUESTION Which of the following is a supported browser for epo? Select the two that apply. A. Internet Explorer B. Firefox C. Safari 28 D. Chrome E. Opera Correct Answer: AB /Reference: QUESTION After a query has been completed, additional actions can be taken on the A. lower right hand corner of page B. lower left hand corner of page C. upper right hand corner of page

26 D. upper left hand corner of page /Reference: QUESTION Which of the following methods can be used to add systems to groups within the system tree? Select the three that apply. A. Login scripts B. Importing AD containers C. A text file D. Importing AD systems E. Rogue system detections CD /Reference: QUESTION Which areas of the console allow the resetting of inheritance? Select the three that apply. A. Assigned Policies B. Policy Catalog 29 C. Group Details D. Systems E. Client Tasks Correct Answer: ABE /Reference: QUESTION Which of the following command line options for the cmdagent.exe will check for new policies and enforces them immediately upon receipt? A. /N B. /P C. /C D. /E Correct Answer: C

27 /Reference: QUESTION When creating a Run Query Server Task, which sub-actions can be selected to allow the system to automatically act upon the results of a query? Select the three that apply. A. Apply tag B. Delete sensor C. Create group D. Export to file E. Send snmp trap Correct Answer: ABD /Reference: QUESTION Agent Handlers are used to 30 A. replace distributed repositories B. ensure agents receive policies, tasks, and product updates C. fix a broken network segment D. identify Rogue Systems on the network /Reference: QUESTION What is the only Dashboard that is active by default? A. RSD Summary B. Executive Dashboard C. HIP Dashboard D. epo Summary /Reference: QUESTION When a group has four sorting criterions assigned, the system will be placed into the group when it meets how many of the conditions?

28 A. One B. Two C. Three D. Four Correct Answer: A /Reference: QUESTION What is the maximum amount of time in seconds that can be configured for ping timeout in the McAfee Agent policy? 31 A. 15 B. 30 C. 60 D. 90 Correct Answer: C /Reference: QUESTION Which settings are preserved when installing VirusScan on a computer that had a previous version installed? Select the three that apply. A. Help files B. Scanning Engine C. Detection definition file D. Log file names and locations E. Registry Keys containing product versions CD /Reference: QUESTION Which file found in the \Program Files\McAfee\ePolicy Orchestrator\Server\conf directory needs to be modified to change the default epo Console session timeout? A. server.xml B. web.xml C. tomcat-users.xml D. context.xml

29 /Reference: QUESTION How many managed machines are required before it is recommended to use a dedicated epo server? 32 A. 50 B. 500 C D Correct Answer: C /Reference: QUESTION Framework Service is responsible for which of the following functions? Select the two that apply. A. Schedule Server Tasks B. Enforce Policies C. Collect and Send system Properties D. Scan for threats and vulnerabilities E. Policy throttling C /Reference: QUESTION McAfee epo server listens on Port 8443 for connection to the administrative console. The Apache service port listens is on which of the following default ports? A. 80, 8081 B. 8081, 8443 C. 80, 443 D. 8444, 1433 Correct Answer: C /Reference:

30 QUESTION When computers check into the System Tree, subgroups are considered for matching criteria according to 33 A. criteria B. tag C. sorting order D. IP filtering Correct Answer: C /Reference: 34

MA0-100.exam.83q MA0-100 McAfee Certified Product Specialist-ePO

MA0-100.exam.83q MA0-100 McAfee Certified Product Specialist-ePO MA0-100.exam.83q Number: MA0-100 Passing Score: 800 Time Limit: 120 min MA0-100 McAfee Certified Product Specialist-ePO Exam A QUESTION 1 Which of the following server services is responsible for communication