Deck 1: Certified McAfee Security Specialist - Epo

Question 1

Why would a managed system appear in the Lost & Found group?

A) No matching criteria were found
B) Matched sorting criteria were found
C) Inactive Agent
D) Rogue Agent

Answer 1

No matching criteria were found

Question 2

Which areas of the console allow the resetting of inheritance? (Choose three)

A) Assigned Policies
B) Policy Catalog
C) Group Details
D) Systems
E) Client Tasks

Answer 2

Assigned Policies
Policy Catalog
Client Tasks

Question 3

Which of the following is a core architecture component of ePO?

A) Internet Explorer
B) Event Parser
C) Active Directory
D) Agent Handler

Answer 3

Event Parser

Question 4

When a policy is deleted, all systems for which it is currently applied to will inherit which policy?

A) McAfee Default
B) Parent Group
C) My Default
D) Global Root

Question 5

Deployment packages that are checked into the ePO server have which of the following file extension?

A) .arc
B) .rar
C) .zip
D) .jar

Question 6

Which of the following is the correct order for creating a query?

A) Configure Chart, choose Columns, select Result Type, apply Filter
B) Select Result Type, choose Columns, configure Chart, apply Filter
C) Configure Chart, select Result Type, choose Columns, apply Filter
D) Select Result Type, configure Chart, choose Columns, apply Filter

Question 7

Which of the following should be the primary consideration when deploying Agent Handlers?

A) Database increasing in size
B) Log files increasing in size
C) Memory and resource allocation
D) High speed and low latency connection

Question 8

Which settings are preserved when installing VirusScan on a computer that had a previous version installed? (Choose three)

A) Help files
B) Scanning Engine
C) Detection definition file
D) Log file names and locations
E) Registry Keys containing product versions

Question 9

Query results are displayed within ePO in what form? (Choose two)

A) PDF
B) Charts
C) XML
D) Tables
E) TXT

Question 10

When creating a Run Query Server Task, which sub-actions can be selected to allow the system to automatically act upon the results of a query? (Choose three)

A) Apply tag
B) Delete sensor
C) Create group
D) Export to file
E) Send snmp trap

Question 11

After a query has been completed, additional actions can be taken on the:

A) Lower right hand comer of page
B) Lower left hand corner of page
C) Upper right hand corner of page
D) Upper left hand corner of page

Question 12

When configuring Product Deployment Client Tasks, the "Enable randomization" setting should be activated when managed client nodes exceed.

A) 100
B) 500
C) 750
D) 1000

Question 13

To remove computers from ePO using the Active Directory Synchronization task, it is required that the account has access to the:

A) Deleted computers
B) Deleted Objects container
C) Organizational Unit
D) Active Directory.

Question 14

When backing up an ePO server, which of the following security keys is required to restore agent server communication?

A) Local Master Repository Communication
B) Agent Server Secure Communication
C) Legacy Agent Server Communication
D) McAfee SIA Repository Communication

Question 15

Which of the following server services is responsible for communication with the McAfee Agent?

A) Apache
B) Tomcat
C) SQL
D) Event Parser

Question 16

To ensure that a Rogue System Detection Sensor is not installed on a managed system, what action needs to be performed?

A) Add the system to the Exception List
B) Add the system to the Blacklist
C) Add the system as Ignored
D) Add the system as Managed

Question 17

Which of the following options are available when right clicking a file and selecting "Scan for threats"? (Choose two)

A) Clean
B) Delete
C) Continue
D) Prompt for action
E) Continue scanning

Question 18

When running a "Run Tag Criteria" server task and the box for "Reset manually tagged and excluded systems" box is checked, this would:

A) Include both systems that match and don't match.
B) Remove the tag on systems that do match the criteria.
C) Add the tag on systems that don't match the criteria.
D) Remove the tag on systems that don't match the criteria.

Question 19

Agent Handlers are used to:

A) Replace distributed repositories.
B) Ensure agents receive policies, tasks, and product updates.
C) Fix a broken network segment.
D) Identify Rogue Systems on the network.

Question 20

What option can be configured in the On-Access General Policy that is not an option in the local VirusScan console?

A) Boot sectors
B) Floppy during shutdown
C) Enable on-access scanning at system startup
D) Enable on-access scanning when the policy is enforced

Question 21

When a policy is locked, it prevents modification of the;

A) Policy
B) Assignment
C) System tree
D) Sub groups

Question 22

A Subnet that has a Rogue System Detection Sensor installed is:

A) Active
B) Inactive
C) Uncovered
D) Covered

Question 23

Which of the following system properties does the ePO server write to the database? (Choose three)

A) Total disk space
B) Total physical memory
C) Last communication
D) VirusScan version
E) McAfee agent version

Question 24

What function is disabled for the default "ePO Summary" dashboard?

A) Edit
B) Delete
C) Make active
D) Make public

Question 25

Which of the following is a default permission set?

A) Executive Previewer
B) Site Administrator
C) Site Reviewer
D) Group Reviewer

Question 26

What is used to configure the SQL server to drop the transaction logs once a checkpoint is complete?

A) Full
B) Simple
C) Bulk-Logged
D) Recovery

Question 27

Which of the following methods can be used to add systems to groups within the system tree? (Choose three)

A) Login scripts
B) Importing AD containers
C) A text file
D) Importing AD systems
E) Rogue system detections

Question 28

When configuring the Active Directory settings, exceptions can include which of the following?

A) Organizational Units
B) Computers
C) Domain Groups
D) Users

Question 29

Private queries are available to:

A) The creator
B) Global Administrators
C) Administrators who have permission
D) Group Administrators

Question 30

An administrator can configure a query to run a scheduled sub-action to do which of the following? (Choose two)

A) Resort Systems
B) Create Tag
C) Move Systems to another Group
D) Clear Policy
E) Add to Rogue Systems

Question 31

Which options must be selected when creating a maintenance plan for the SQL Database? (Choose three)

A) Shrink Database
B) Check Database Integrity
C) Rebuild Index
D) Clean Up History
E) Back Up Database

Question 32

Which of the following options are available from the ePO Server settings? (Choose three)

A) Ports
B) Global Updating
C) Event Migration
D) Active Directory Synchronization
E) Email Server

Question 33

Which VirusScan policy configures the option "Allow this system to make remote console connections to other systems'?

A) User interface
B) On-Access Scanner
C) Quarantine Manager
D) Unwanted Programs

Question 34

Which of the following are used to update the master repository on a regular basis?

A) Automatic Response
B) Client Task
C) Server Task
D) Server Settings

Question 35

What Artemis sensitivity level is selected when the regular risk of exposure to malware is greater than the risk of a false positive?

A) Low
B) Medium
C) High
D) Very High

Question 36

When a group has four sorting criterions assigned, the system will be placed into the group when it meets how many of the conditions?

A) One
B) Two
C) Three
D) Four

Question 37

What is the only Dashboard that is active by default?

A) RSD Summary
B) Executive Dashboard
C) HIP Dashboard
D) ePO Summary

Question 38

What location is used to change the default Dashboard for new ePO Console users?

A) Personal Settings
B) Permission Sets
C) Contacts
D) Server Settings

Question 39

Which of the following are examples of client tasks? (Choose three)

A) Agent Wakeup
B) Product Update
C) Repository pull
D) Mirror Repositories
E) Event Migration

Question 40

What Artemis sensitivity level is selected to protect systems or areas that are regularly infected?

A) Low
B) Medium
C) High
D) Very High

Question 41

Product deployment packages are checked into what repository?

A) Distributed
B) Master
C) Fallback
D) Source

Question 42

Which of the following command line options for the cmdagent.exe will check for new policies and enforces them immediately upon receipt?

A) /N
B) /P
C) /C
D) /E

Question 43

When performing the On-Demand scan, what System utilization settings are affected?

A) Cookie
B) Registry
C) Encrypted files
D) Targeted files

Question 44

When creating a permission set, which of the following users are automatically assigned? (Choose two)

A) Admin
B) Group Admin
C) System
D) Global Administrator
E) Global Reviewer

Question 45

Which of the following is a supported browser for ePO? (Choose two)

A) Internet Explorer
B) Firefox
C) Safari
D) Chrome
E) Opera

Question 46

Which of the following are valid Automatic Query Actions that can be selected from a result of a query? (Choose three)

A) Install Point Products
B) Assign Policy
C) Move Systems to another Group
D) Email File
E) Remove Point Products

Question 47

When configuring a Synchronization Type for a group within the System Tree which of the following is a valid choice? (Choose three)

A) Leave systems in their current system tree location only
B) Add systems to the synchronized group and leave them in the current system tree location
C) Add systems to the synchronized group and delete duplicate entries
D) Add systems to the synchronized group and mark duplicate entries
E) Move systems from their current system tree location to the synchronized group

Question 48

Which of the following are valid server tasks for updating the ePO repositories? (Choose two)

A) Repository pull
B) Update
C) Repository replication
D) Mirror
E) Product deployment

Question 49

Framework Service is responsible for which of the following functions? (Choose two)

A) Schedule Server Tasks
B) Enforce Policies
C) Collect and Send system Properties
D) Scan for threats and vulnerabilities
E) Policy throttling

Question 50

When opening an existing policy, the policy settings are organized across:

A) Interfaces
B) Tabs
C) Screens
D) Columns

Question 51

Which of the following steps are needed for Policy Sharing? (Choose three)

A) Register the remote ePO servers
B) Share the individual policies
C) Configure Server Task
D) Enable Global Updating
E) Share default policies

Question 52

Within the Server Services, which component manages events, Group management, Tag management, and Agent sorting?

A) Event Parser
B) Framework service
C) Tomcat
D) Apache

Question 53

How many managed machines are required before it is recommended to use a dedicated ePO server?

A) 50
B) 500
C) 5000
D) 50000

Question 54

What detail property includes the local Time Zone value of a managed machine?

A) VirusScan Enterprise Properties
B) McAfee Agent Properties
C) Host Intrusion Preventions Properties
D) System Information Properties

Question 55

Which of the following are valid deployment package types? (Choose two)

A) Catalog.z
B) Agent Language pack
C) Extradat
D) Artemis pack
E) ePOMain

Question 56

Which two items are modified in the "Full Scan Task" when installing the Anti-Spyware module? (Choose two)

A) Registry
B) Cookies
C) Running Process
D) Recycle bin
E) Memory for Rootkits

Question 57

In which area of the console is the System Tree Sorting enabled?

A) Server Settings
B) Client tasks
C) Sorting Criteria
D) Assigned Policies

Question 58

When an on-demand scan starts, the feature takes CPU and 10 samples over the first:

A) 20 seconds
B) 30 seconds
C) 40 seconds
D) 50 seconds

Question 59

McAfee ePO server listens on Port 8443 for connection to the administrative console. The Apache service port listens is on which of the following default ports?

A) 80, 8081
B) 8081, 8443
C) 80, 443
D) 8444, 1433

Question 60

Where in the ePO database is the ePO Agent gathered system information stored?

A) epocomputerproperties
B) epobranc
C) epoleafnode
D) epoproductproperties

Question 61

What protocol is used for secure communication between the McAfee Agent and server?

A) IPSEC
B) SPIPE
C) SFTP
D) HTTP

Question 62

If a policy that is assigned to the "My Organization" group is deleted, what policy is assigned in its place?

A) McAfee Default
B) Parent Group
C) My Default
D) Global Root

Question 63

Which of the following can NOT be placed into a dashboard?

A) Boolean pie chart
B) Multi-group summary table
C) Single-group summary table
D) Table

Question 64

What is the default number of sensors that will be active per subnet?

A) 1
B) 2
C) 3
D) 4

Question 65

Which file found in the \Program Files\McAfee\ePolicy Orchestrator\Server\conf directory needs to be modified to change the default ePO Console session timeout?

A) server.xml
B) web.xml
C) tomcat-users.xml
D) context.xml

Question 66

Which of the following services is related to Super Agents?

A) Framework
B) Application Server
C) Event Parser
D) Tomcat

Question 67

When managing tags what is NOT available in the System Tree?

A) Clear Tag
B) Exclude Tag
C) Apply Tag
D) New Tag

Question 68

An RSD Sensor has been deployed from the ePO console. However, it has not reported back. Which of the following is the most likely cause? (Choose three)

A) The sensor is unable to resolve the IP address for ePO
B) The sensor is blacklisted
C) Deployment of the sensor failed
D) Sensor service is disabled after installation
E) The sensor is an exception

Question 69

Which of the following types of distributed repositories is supported by ePO? (Choose three)

A) HTTP
B) FTP
C) UNC
D) DHCP
E) LDAP

Question 70

Which of the following is an available default notification rule?

A) Daily known category notification
B) Virus detected and not removed
C) Virus detected and removed
D) Non-complaint computer detected

Question 71

Which of the following uses a proprietary SPIPE protocol to encapsulate unsecured HTTP traffic?

A) PA Agent
B) HIPS Agent
C) DLP Agent
D) McAfee Agent

Question 72

Which of the following Server Services is responsible for Automatic Responses?

A) Event Parser
B) Framework service
C) Tomcat
D) Apache

Question 73

If you specify the McAfee Agent Policy to collect only minimal properties, the agent collects only which of the following? (Choose two)

A) Installed software information
B) DAT file version number
C) Processor speed
D) Installation path
E) Operation system

Question 74

What utility is used to create a custom VirusScan installation package that contains updated DAT and engine files?

A) Deployment task
B) Manual install
C) Installation Designer
D) MSI Installer

Question 75

What file contains the list of disabled event ids?

A) EventFilter.cfg
B) EventFilter.ini
C) Evtfiltr.ini
D) Server.ini

Question 76

Which of the following are available within the Policy Catalog? (Choose three)

A) Share
B) Duplicate
C) Assign
D) View
E) Lock

Question 77

What is the maximum amount of time in seconds that can be configured for ping timeout in the McAfee Agent policy?

A) 15
B) 30
C) 60
D) 90

Question 78

An Alien Agent is a system that:

A) Has not reported back to ePO in the last 30 days,
B) Does not have a McAfee Agent installed.
C) Has the Agent Component disabled.
D) Is reporting to a different ePO Server.

Question 79

Which of the following are examples of default column headers on the Server Task area of the interface? (Choose two)

A) Description
B) Duration
C) Name
D) Source
E) Status

Question 80

What options are available to the administrator when creating a client task to limit the systems that receive the task?

A) Tasks can only be assigned globally
B) Tasks can only be assigned to a specific group
C) Task can be configured with defined criteria
D) Task can be enabled when the desired systems are online