MA0-104無料問題集「McAfee Intel Security Certified Product Specialist-SIEM」

質問 1

Which of the following two appliances contain Event databases?

（A）ELM and REC

（B）ESM and REC

（C）REC and ADM

（D）ESM and ELM

正解：B 解答を投票する

質問 2

When viewing the Policy Tree, what four columns are displayed within the Rules Display pane?

（A）Action, Seventy, Normalization, Copy Packet

（B）Enable, Severity, Aggregation, Copy Packet

（C）Action, Seventy, Aggregation, Drop Packet

（D）Action, Seventy, Aggregation, Copy Packet

正解：D 解答を投票する

質問 3

If there is no firewall at the border of the network, which of the following could be used to simulate the
protection a firewall provides?

（A）Load balancer

（B）An email gateway

（C）Router Access Control List (ACL)

（D）Switch port blocking

正解：C 解答を投票する

質問 4

A McAfee Event Receiver (ERC) will allow for how many Correlation Data Sources to be configured?

（A）3

（B）5

（C）1

（D）10

正解：C 解答を投票する

質問 5

When displaying baseline averages using the automatic time range option, baseline data is correlated by
using the same time period that is being used for the current query for which of the following past number
of intervals?

（A）Five

（B）Three

（C）Seven

（D）Ten

正解：A 解答を投票する

質問 6

The McAfee Advanced Correlation Engine (ACE) ca n t >e deployed in one of two modes which are.?

（A）Threshold and Anomaly.

（B）Stateful and Stateless.

（C）Prevention and Detection.

（D）Historical and Real-Time.

正解：D 解答を投票する

質問 7

The analyst has created a correlation rule to correlate events from Anti-Virus (AV>, Network Intrusion
Prevention (NIPS) and the firewall. While reviewing just firewall events, the analyst notices a large spike
in outbound Command and Control traffic, however, the correlation rule is not triggering The analyst then
looks at the Network IPS and the Anti-Virus views and notices there are no alerts for this traffic. Which of
the following features of NIPS and AV are most likely turned off?

（A）Heuristics

（B）Automatic DAT updates

（C）Advanced Persistent Threats (APT)

（D）Alerting

正解：A 解答を投票する

MA0-104 無料問題集「McAfee Intel Security Certified Product Specialist-SIEM」

弊社を連絡する

関連リンク

トップ試験