Question 1

Which CLI command is used to copy sensor SSL certificates from external flash when replacing a failed sensor?

Accepted Answer

The correct command to copy sensor SSL certificates from external flash when replacing a failed sensor is "Importsensorcerts".

Question 2

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

Accepted Answer

SPAN (Switched Port Analyzer) mode receives a copy of the packet from a mirrored switch port.

Question 3

If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

Accepted Answer

McAfee NAC assigns the "Unknown" health level to a host when its health status cannot be determined.

Question 4

Which attack cannot be blocked when the sensor has been set for in-line mode?

Accepted Answer

TCP Control Anomaly cannot be blocked when the sensor has been set for in-line mode because it is a passive attack that does not involve sending any packets to the target.

Question 5

Setting a threshold on a sensor to react if traffic volume exceeds the threshold limit is an example of what specific detection method?

Accepted Answer

The answer of Setting a threshold on a sensor to...

Question 6

When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Accepted Answer

When the alert cache is full, new incoming alerts are added to the cache, and the oldest alerts are dropped to make space for the new ones.

Question 7

Policies can be configured to drop packets when which of the following has been defined?

Accepted Answer

When the sensor is deployed in Inline mode, it can actively drop packets based on the configured policies.

Question 8

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Accepted Answer

The answer of The Network Security Manager provides the following...

Question 9

Which policy is assigned to a child domain by default?

Accepted Answer

The policy of the parent domain is assigned to a child domain by default.

Question 10

Reconnaissance Policies can be applied to which of the following sensor nodes?

Accepted Answer

The answer of Reconnaissance Policies can be applied to which...

Question 11

Which mode needs to be set to redirect an unmanaged system to the guest portal?

Accepted Answer

Enforcement mode is used to redirect unmanaged systems to the guest portal for authentication or registration.

Question 12

Which of the following modes can be used to implement DoS detection? (Choose two)

Accepted Answer

The answer of Which of the following modes can be...

Question 13

Which database is supported for Network Security Manager?

Accepted Answer

The answer of Which database is supported for Network Security...

Question 14

Which of the following deployment modes is not included in standard NAC?

Accepted Answer

The answer of Which of the following deployment modes is...

Question 15

Which logs are used to determine who was logged into the Manager the last time a signature set update was pushed from the Manager to the Sensor?

Accepted Answer

The User Activity Audit log records user activities, including logins and actions taken, which would include who was logged in when a signature set update was pushed.

Question 16

Which of the following methods are available for upgrading a Sensor image?

Accepted Answer

The answer of Which of the following methods are available...

Question 17

Which command is used to manually download signature tiles from the tftpserver when connectivity to the Manager is not available?

Accepted Answer

The answer of Which command is used to manually download...

Question 18

Which of the following is the correct extension for a Sensor image imported into the Manager?

Accepted Answer

The answer of Which of the following is the correct...

Question 19

A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as "unmanaged with an Unknown Health Level"?

Accepted Answer

When McAfee NAC reports a host status as "unmanaged with an Unknown Health Level," the sensor typically redirects the host to the Guest Client Portal to ensure that the device is properly managed and assessed before granting network access.

Question 20

Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

Accepted Answer

The answer of Which of the following are considered part...

Exam 2: Certified McAfee Security Specialist - NSP