MA0-104無料問題集「McAfee Intel Security Certified Product Specialist-SIEM」

質問 1

Which options within the Receiver properties should be selected to configure the device to respond to
ICMP echo requests?

（A）Receiver Configuration\lnterface

（B）Key Management Key Device

（C）Receiver Management A Update Device

（D）Connedion\Status

正解：A 解答を投票する

質問 2

Event Aggregation is performed on which of the following fields?

（A）Source IP, Destination IP, User ID

（B）Signature ID, Destination IP, User ID

（C）Signature ID, Source IP, Destination IP

（D）Signature ID, Source IP, User ID

正解：C 解答を投票する

質問 3

The McAfee Enterprise Log Manager (ELM) offers three levels of compression (Low, Medium, and High).
By default, the ELM compression level is set to Low. Which of the following is the compression ratio for
the Medium level?

（A）10:1

（B）14:1

（C）17:1

（D）20:1

正解：C 解答を投票する

質問 4

When a Correlation Rule successfully triggers, this occurs at the

（A）Correlation Element.

（B）Correlation Manager.

（C）Correlation Engine.

（D）Correlation Processor.

正解：C 解答を投票する

質問 5

Which of the following are the three default users defined within the Users and Groups option in the ESM properties?

（A）ADMIN, POLICY, REPORT

（B）NGCP, SYSTEM, REPORT

（C）NGCP, POLICY, REPORT

（D）NGCP, BACKUP, REPORT

正解：B 解答を投票する

質問 6

The historical ACE function allows the user to perform retrospective correlations on older data. In which of
the following devices is the data located that the historical correlation engine uses?

（A）ADM

（B）REC

（C）ELM

（D）ESM

正解：C 解答を投票する

質問 7

Checkpoint firewalls provide logs to the McAfee SIEM Receiver in which of the following formats?

（A）Syslog

（B）McAfee Event Format (MEF)

（C）open Platform for Security (OPSEC)

（D）Common Event Format (CEF)

正解：C 解答を投票する

MA0-104 無料問題集「McAfee Intel Security Certified Product Specialist-SIEM」

弊社を連絡する

関連リンク

トップ試験