DISA HBSS ESS 301 (ePO 5.10) Exam – Questions And Answers (100%)

DISA HBSS ESS 301 (ePO 5.10) Exam – Questions And
Answers (100%).
1. Which ESS component allows administrators to block the use of removable storage devices?
a. PA
b. DLPe
c. ePO
d. HIPS
Answer: B
2. In the DLP Agent Configuration for Notifications, what should be added to append the name of the
file/device/etc.?
a. %d
b. %s
c. %r
d. %f
Answer: B
3. DLP/DCM Plug and Play devices can be identified by which of the following?
a. Network Classes
b. Device Classes
c. MAC Addresses
d. IP Addresses
Answer: B
4. Device Control policies are configured using which of the following?
a. Device Control Policy Manager
b. ePO Policy Manager
c. HIPS Policy Manager
d. DLP Policy Manager
Answer: D
5. What is the main executable for the DLP/DCM Agent?
a. FCAGS.exe
b. FCAG.exe
c. FCAGTE.exe
d. FCAGSWD.exe
Answer: B

, 6. Is it necessary to create an agent override key to remove the Host DLP/DCM Agent when using a
McAfee Agent Deployment task?
a. True
b. False
Answer: B
7. Which executable monitors the Host DLP/DCM Agent and restarts it if it stops running?
a. Fcagswd.exe
b. Fcags.exe
c. Fcagte.exe
d. Fcag.exe
Answer: A
8. What is a valid DLP/DCM Device Class status?
a. Operational
b. Managed
c. Configured
d. Not Configured
Answer: B
9. Is it possible to install the DLP Agent on Linux machines?
a. True
b. False
Answer: B
10. Can both ENS and HIPS 8.0 be installed on the same machine as of ENS 10.5?
a. True
b. False
Answer: A
11. What tool informs you about new and updated licensed McAfee software products, trial versions, and
allows you to manage them?
a. Software Catalog
b. Fallback Site
c. Source Site
d. Software Repository
Answer: A