Question 1

Which of the following deployment modes is not included in standard NAC?

Accepted Answer

A)  System Health based NAC 
B)  DHCP based NAC 
C)  L2 based NAC 
D)  L3 based NAC 
A)  System Health based NAC 
B)  DHCP based NAC 
C)  L2 based NAC 
D)  L3 based NAC B

Question 2

Which NSP sensor models support SSL encryption? (Choose three)

Accepted Answer

A)  M-4050 
B)  M-1450 
C)  M-2750 
D)  M-1250 
E)  M-6050 
A)  M-4050 
B)  M-1450 
C)  M-2750 
D)  M-1250 
E)  M-6050 A,C,E

Question 3

Which of the following methods are available for upgrading a Sensor image?

Accepted Answer

A)  TFTP and/or through the Manager 
B)  PUTTY and/or through the Manager 
C)  Console connection and/or through the Manager 
D)  TFTP, console connection and/or through the Manager 
A)  TFTP and/or through the Manager 
B)  PUTTY and/or through the Manager 
C)  Console connection and/or through the Manager 
D)  TFTP, console connection and/or through the Manager A

Question 4

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Accepted Answer

A)  Allow DNS Access 
B)  Allow Full Access 
C)  Public Network Only 
D)  Allow DHCP Access 
E)  Allow Intranet Access 
A)  Allow DNS Access 
B)  Allow Full Access 
C)  Public Network Only 
D)  Allow DHCP Access 
E)  Allow Intranet Access

Question 5

Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

Accepted Answer

A)  Audit 
B)  IPS 
C)  TAP 
D)  Simulation 
E)  Enforcement
F) SPAN 
A)  Audit 
B)  IPS 
C)  TAP 
D)  Simulation 
E)  Enforcement
F) SPAN

Question 6

A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as "unmanaged with an Unknown Health Level"?

Accepted Answer

A)  Guest Client Portal 
B)  NAC Client Portal 
C)  Sensor Client Portal 
D)  DNS Server Portal 
A)  Guest Client Portal 
B)  NAC Client Portal 
C)  Sensor Client Portal 
D)  DNS Server Portal

Question 7

Malware Protection requires which of the following feature or features to be enabled?

Accepted Answer

A)  HTTP response scanning 
B)  Attack Filters 
C)  Performance Monitoring 
D)  The "Default Inline IPS" policy 
A)  HTTP response scanning 
B)  Attack Filters 
C)  Performance Monitoring 
D)  The "Default Inline IPS" policy

Question 8

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Accepted Answer

A)  Customer Identification tag (C
D)  
B)  VLAN Identifier tag (VI
D)  
C)  Outer Identifier tag (OI
D)  
D)  Inner Identifier tad (I
D)  
A)  Customer Identification tag (C
D)  
B)  VLAN Identifier tag (VI
D)  
C)  Outer Identifier tag (OI
D)  
D)  Inner Identifier tad (I
D)

Question 9

Which CLI command is used to determine that the Sensor has established trust with the Manager?

Accepted Answer

A)  config 
B)  status 
C)  trust 
D)  show 
A)  config 
B)  status 
C)  trust 
D)  show

Question 10

McAfee recommends which of the following methods to cable the heartbeat connection of a sensor failover pair?

Accepted Answer

A)  direct fiber connection with specified monitoring ports 
B)  direct copper connection using response ports 
C)  switched fiber connection 
D)  direct copper connection using failopen port 
A)  direct fiber connection with specified monitoring ports 
B)  direct copper connection using response ports 
C)  switched fiber connection 
D)  direct copper connection using failopen port

Question 11

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Accepted Answer

A)  SSL with RC4 
B)  SSL with MD5 
C)  SSL with RC4 and MD5 
D)  DES 
A)  SSL with RC4 
B)  SSL with MD5 
C)  SSL with RC4 and MD5 
D)  DES

Question 12

Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

Accepted Answer

A)  Tap 
B)  Span 
C)  In-line 
D)  Failover 
A)  Tap 
B)  Span 
C)  In-line 
D)  Failover

Question 13

When creating policies, which of the following rule sets are available for selection within those policies?

Accepted Answer

A)  Only rule sets created using the Rule Set Editor 
B)  Only rule sets imported from the Sensor 
C)  Only rule sets created using the Rule Set Editor and Default rule sets 
D)  Only Default Rule sets 
A)  Only rule sets created using the Rule Set Editor 
B)  Only rule sets imported from the Sensor 
C)  Only rule sets created using the Rule Set Editor and Default rule sets 
D)  Only Default Rule sets

Question 14

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

Accepted Answer

A)  Redundant 
B)  SPAN 
C)  TAP 
D)  In-line 
A)  Redundant 
B)  SPAN 
C)  TAP 
D)  In-line

Question 15

If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

Accepted Answer

A)  Fair 
B)  Poor 
C)  Serious 
D)  Unknown 
A)  Fair 
B)  Poor 
C)  Serious 
D)  Unknown

Question 16

When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Accepted Answer

A)  Incoming alerts are added to the cache and the oldest alerts are dropped 
B)  Incoming alerts are not added to the cache and are dropped 
C)  Incoming alerts are held in queue until cache space is cleared 
D)  Incoming alerts are added to the database directly 
A)  Incoming alerts are added to the cache and the oldest alerts are dropped 
B)  Incoming alerts are not added to the cache and are dropped 
C)  Incoming alerts are held in queue until cache space is cleared 
D)  Incoming alerts are added to the database directly

Question 17

Which of the following actions can a Standby Manager of an MDR pair perform?

Accepted Answer

A)  Modify sensor configuration 
B)  Policy configuration 
C)  Signature update 
D)  Configuration backup 
A)  Modify sensor configuration 
B)  Policy configuration 
C)  Signature update 
D)  Configuration backup

Question 18

Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Accepted Answer

A)  Device List 
B)  Resource Tree 
C)  Details Pane 
D)  System Links 
A)  Device List 
B)  Resource Tree 
C)  Details Pane 
D)  System Links

Question 19

Which mode needs to be set to redirect an unmanaged system to the guest portal?

Accepted Answer

A)  Audit 
B)  Simulation 
C)  Enforcement 
D)  Prevention 
A)  Audit 
B)  Simulation 
C)  Enforcement 
D)  Prevention

Question 20

Policies can be configured to drop packets when which of the following has been defined?

Accepted Answer

A)  The policy has been enabled 
B)  The underlying rule set permits dropped packets 
C)  The sensor is deployed in Inline mode 
D)  The policy has been cloned 
A)  The policy has been enabled 
B)  The underlying rule set permits dropped packets 
C)  The sensor is deployed in Inline mode 
D)  The policy has been cloned

Which of the following deployment modes is not included in standard NAC?

Which NSP sensor models support SSL encryption? (Choose three)

Which of the following methods are available for upgrading a Sensor image?

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as "unmanaged with an Unknown Health Level"?

Malware Protection requires which of the following feature or features to be enabled?

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Which CLI command is used to determine that the Sensor has established trust with the Manager?

McAfee recommends which of the following methods to cable the heartbeat connection of a sensor failover pair?

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

When creating policies, which of the following rule sets are available for selection within those policies?

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Which of the following actions can a Standby Manager of an MDR pair perform?

Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Which mode needs to be set to redirect an unmanaged system to the guest portal?

Policies can be configured to drop packets when which of the following has been defined?

Certified McAfee Security Specialist - Epo

Intel Security Certified Product Specialist

Filters

Exam 2: Certified McAfee Security Specialist - NSP

Which of the following deployment modes is not included in standard NAC?

Which NSP sensor models support SSL encryption? (Choose three)

Which of the following methods are available for upgrading a Sensor image?

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Which of the following are considered part of the Operational mode of System Health-based NAC? (Choose three)

A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as "unmanaged with an Unknown Health Level"?

Malware Protection requires which of the following feature or features to be enabled?

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Which CLI command is used to determine that the Sensor has established trust with the Manager?

McAfee recommends which of the following methods to cable the heartbeat connection of a sensor failover pair?

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

When creating policies, which of the following rule sets are available for selection within those policies?

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Which of the following actions can a Standby Manager of an MDR pair perform?

Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Which mode needs to be set to redirect an unmanaged system to the guest portal?

Policies can be configured to drop packets when which of the following has been defined?

Certified McAfee Security Specialist - Epo

Intel Security Certified Product Specialist

Filters