Question Your answer Result

Select the ePolicy Orchestrator component that caches policies to reduce

0 Apache Pass
database reads and speed up ASCI time.

Select the ePolicy Orchestrator component that provides the UI of the System
1 Tomcat Pass
tree; sorting of nodes; tags and policies.

2 Which ePO core component enforces the policies on the systems? McAfee Agent Pass

Communications between Tomcat and the Web browser accessing the ePO
3 HTTPS. 8005 Pass
console is accomplished using what traffic through which port?

Which ePO component gathers the events from the managed systems and
4 McAfee Agent Pass
communicates them to the ePO server?
When you assign a
new policy to a
particular group of the
Which of the following is a valid statement regarding the task of managing Directory; then all
5 Pass
policies in ePO? systems under that
group with inheritance
intact will inherit the
new policy.
6 The Client Task Catalog allows you to create which of the following? Client task objects Pass

What ePO server task updates ePO distributed repositories from the master
7 Replication task Pass
repository?

The Agent to Server Communication for the McAfee Agent is encrypted using
8 TLS Pass
which of the following?

It is web based and

designed completely
9 Which statement is true concerning the ePO console? Pass
in HTML and
JavaScript.

In the Client Task Catalog you can export all of your client tasks into an XML
10 1 Pass
file that can be imported into another ePolicy Orchestrator Server.

Executive Reviewer;
Global Reviewer;
11 What are the four main types of Permission Sets in ePO? Pass
Group Admin; Group
Reviewer

12 Which ePO user listed below can create and edit tags in ePO? Administrator Pass
 Tags without criteria
13 What types of Tags can you create? Pass
and Criteria based tags

14 Which ePO repository provides all updates to the ePO Master repository? Source Pass

15 Public Queries exist in which of the following lists? Shared Groups Pass

16 From this list select the format that you cannot export your query results to. DOC Pass

17 What column is not displayed in the Audit Log? Failure Pass

Signature; behavioral
18 Which answer lists ALL the layers of protection in the HIPS client? Pass
and firewall protection

19 Which executable runs the main HIPS service? Firesvc.exe Pass

Which of the following can be created to prevent interpreting a normal

20 Exception Pass
behavior as an attack?

Applications; system
registry and services
21 Which statement best defines Application Shielding in HIPS? are locked down Pass
against malicious
activity.

High; Medium; Low;

22 What are the four severity levels of signature in HIPS? Pass
Information

Assume three IPS policies are applied to a node; 1 default and 2 custom. The
default severity level is set to HIGH; 1 custom severity level is set to LOW
23 Medium Pass
and the other custom is set to MEDIUM. What is the effective severity level
outcome for the applied polic

Each Firewall Rule provides a set of conditions that which of the following has
24 Traffic Pass
to meet?

What is the default password for unlocking the client user interface when
25 abcde12345 Pass
troubleshooting the McAfee HIPS client?
 Configure the IPS
Options policy to
disable IPS; Configure
26 How do you uninstall the HIPS client for Windows from a managed system? the McAfee Agent Pass
deployment task to
remove the HIPS
client.
To verify that the IP address sorting criteria that has not been configured to
27 overlap between different groups; you can use which of the following Check IP Integrity Pass
options?

HKEY_LOCAL_MACHIN
Prior to imaging the system the registry entry for the McAfee Agent; which E\SOFTWARE\Network
28 Pass
line should be deleted? Associates\ePO\Agent\
AgentGUID

To manually move a system from one group to another; you do which two
29 Drag and drop Pass
things with the system to move it to the other group?

Which of the following is not a protection level defined in the IPS Protection
30 Allow Pass
Policy?

31 Which is not a type of IPS Signature? Global Signatures Pass

Which IPS policy determines what options are available to a client computer
with a HIPS client; including; whether or not the client icon appears in the
32 Client UI Pass
system tray; types of intrusion alerts; and password to allow access to the
client user interface?

33 In which order are HIPS Firewall rules processed to filter incoming packets? Top to bottom Pass

If a connection is in the state table; what action will occur with future traffic
34
for that connection?