Exam 3: Intel Security Certified Product Specialist

To correlate known vulnerabilities to devices that are currently exposed to such vulnerabilities, which of the following must be selected on the Receiver?

The McAfee Enterprise Log Manager (ELM) offers three levels of compression (Low, Medium, and High). By default, the ELM compression level is set to Low. Which of the following is the compression ratio for the Medium level?

Analysts can effectively use the McAfee SIEM to identify threats by

Malware performing a network enumeration scan will be visible at the McAfee SIEM as

The Global Blacklist feature can be used to block specific traffic from which of the following devices?