MA0-102 by McAfee Valid Free Exam Practice Test

Question 1

In which order are HIPs Firewall rules processed to filler incoming packets'?

A. Bottom to top B. Top to bottom C. Most severe rules first D. Least severe rules first

Correct Answer: B

Question 2

Which of the following options can prevent policy enforcements locally on the client?

A. Open HIPS Ul B. Open VSE Console C. Un-lock HIPSUI D. Un-lock VSE Console

Correct Answer: C

Question 3

Why is it recommended lo change the agent-to-server and console-to-server communication ports from their default values during installation?

A. The default ports may already be in use inside of the network B. These ports are commonly subjected to malicious exploitation C. To avoid technical issues with port allocation D. The default values are in the common domain

Correct Answer: B

Question 4

With stateful filtering, a slate table is considered a match when which of the following conditions of the packet are matched?

A. Protocol, Local Address. Remote Address B. Protocol. Local Address. Local Port. Remote Address C. Protocol. Local Address. Local Port, Remote Address. Remote Port D. Protocol. Local Address. Local Port

Correct Answer: C

Question 5

Which of the following files is appended under each managed with disabled event information?

A. EvtForward.ini B. AgentEvent.log C. EvtFiltr.ini D. Agent_Event.xml

Correct Answer: C

Question 6

When are MPs client rule exceptions delivered to the ePO Server?

A. When the Event Migration server task is engaged B. During agent-to-server communication C. Immediately upon creation D. When the HIPs Property Translator server task is engaged

Correct Answer: B

Question 7

Which of the following items can be found under the IPS Policy tab in the HIPs Client Ul?

A. Locally created IPS Client Rules B. IPS exceptions from ePO Policy C. Firewall traffic D. Blocked Hosts

Correct Answer: A

Question 8

Which of the following steps should be performed first when troubleshooting issues with custom signatures?

A. Use the Process Monitor and Process Explorer tools B. Disable the HIPs component C. Simplify the signature to find the point of failure D. Review violations in the HipShield.log file

Correct Answer: C

McAfee Certified Product Specialist - HIPs - MA0-102 Exam Practice Test