Question 1

_____________________are a set of Access Control List (ACL) rules that define network access provided to a host, subject to Network Access Control.

Accepted Answer

The answer of _____________________are a set of Access Control List...

Question 2

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Accepted Answer

SSL with RC4 and MD5 is used for secure communication, combining the RC4 stream cipher for encryption and MD5 for message integrity.

Question 3

Which of the following options is the best practice to use if you need to edit all attacks with a specific seventy number within an IPS policy?

Accepted Answer

The Bulk Edit feature within the Policy Editor is specifically designed for making changes to multiple items at once, such as attacks with a specific severity number, within an IPS policy.

Question 4

If the Health Level of the host cannot be determined, which of the following System Health Levels would be assigned?

Accepted Answer

If the Health Level of the host cannot be determined, it is assigned as "Unknown" because there is no information available to categorize it into any specific health level.

Question 5

By default, sensors are configured to operate in which operating mode?

Accepted Answer

Sensors are configured to operate in in-line mode by default. In this mode, the sensor is placed in the data path and all traffic passes through it.

Question 6

When McAfee NAC reports the host status as unmanaged with an Unknown Hearth Level, the sensor redirects the host to which of the following?

Accepted Answer

The sensor redirects the host to the Guest Client Portal when the host status is unmanaged with an Unknown Health Level.

Question 7

Which of the following activities require a reboot of a sensor? (Choose three)

Accepted Answer

The answer of Which of the following activities require a...

Question 8

Which of the following are the methods used by NSP to recognize and react to Denial-of-Service (DoS) attacks? (Choose three)

Accepted Answer

The answer of Which of the following are the methods...

Question 9

Which domains does a Super User have full rights to access?

Accepted Answer

The answer of Which domains does a Super User have...

Question 10

Which of the following CLI commands will not cause an automatic reboot of the Sensor?

Accepted Answer

The answer of Which of the following CLI commands will...

Question 11

Which of the following cannot be configured at the sub-interface level?

Accepted Answer

The answer of Which of the following cannot be configured...

Question 12

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Accepted Answer

The answer of In double VLAN tagging, the second VLAN...

Question 13

In L3 mode, a sensor detects an L2 device based on which address?

Accepted Answer

The answer of In L3 mode, a sensor detects an...

Question 14

Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Accepted Answer

The answer of Where in the Network Security Manager console...

Exam 2: Certified McAfee Security Specialist - NSP