MA0-104 Practice Exam Questions with Answers Intel Security Certified Product Specialist Certification

Which of the following security technologies sits inline on the network and prevents attacks based on signatures and behavioral analysis that can be configured as a data source within the SIEM?

Analysts can effectively use the McAfee SIEM to identify threats by ?

If the maximum size for the Policy Change History log is reached, which of the following happens to new entries?

By default, the McAfee Enterprise Security Manager (ESM) communicates with the McAfee Event Receiver (ERC) and McAfee Enterprise Log Manager (ELM) over port

The ESM supports five Authentication methods. The default login option uses the standard Username and Password format. Which of the following are the other four methods available?

Which of the following is the name of the Dashboard View that shows correlated events for the selected Data Source?

With regard to Data Source configuration and event collection what does the acronym CEF stand for?

Which of the following features of the Enterprise Log Manager (ELM) can alert the user if any data has been modified?

If there is no firewall at the border of the network, which of the following could be used to simulate the protection a firewall provides?

If the SIEM Administrator deploys the Enterprise Security Manager (ESM) using the Federal Information Processing Standards (FIPS) encryption mode, which of the following types of user authentication will NOT be compliant with FIPS?

When the automated system backup is configured to include events, flows and log data, the first backup will capture all events, flows and logs

?

What Firewall component is natively used by the McAfee SIEM appliances to protect the appliances from unauthorized communications?

When preparing to apply a patch to the Enterprise Security Manager (ESM) and completing the ESM checklist, the command cat/proc7mdstat has been issued to determine RAID functionally The system returns an active drive result identified as [U J What action should be taken?

The ESM database is unavailable for use during

Checkpoint firewalls provide logs to the McAfee SIEM Receiver in which of the following formats?

Which of the following two appliances contain Event databases?