Multiple Choice
The analyst has created a correlation rule to correlate events from Anti-Virus (AV) , Network Intrusion Prevention (NIPS) and the firewall. While reviewing just firewall events, the analyst notices a large spike in outbound Command and Control traffic; however, the correlation rule is not triggering. The analyst then looks at the Network IPS and the Anti-Virus views and notices there are no alerts for this traffic. Which of the following features of NIPS and AV are most likely turned off?
A) Alerting
B) Heuristics
C) Advanced Persistent Threats (APT)
D) Automatic DAT updates
Correct Answer:
Verified
Correct Answer:
Verified
Q1: Which of the following features of the
Q2: An organization notices an increasing number of
Q3: How often does the configuration and policy
Q5: A backup of the ELM management database
Q9: The McAfee Enterprise Security Manager (ESM) system
Q10: The McAfee SIEM solution satisfies which of
Q24: Which of the following are the Boolean
Q43: The ESM database is unavailable for use
Q79: The primary function of the Application Data
Q81: To correlate known vulnerabilities to devices that