DISA HBSS 201 Admin ePO5.1

DISA HBSS 201 Admin ePO5.1 What can be created to prevent interpreting a normal behavior as an attack? - Exception Which executable runs the main HIPS service? - F How do yo uninstall the HIPS 7.0 client for Windows from a managed system? - Remove the extension from the ePO Server and initiate the McAfee Agent wakeup call.( double check answer) Assume three IPS policies are applied to a node; 1 default and 2 custom. The default severity level is set to HIGH; 1 custom severity level is set to LOW and the other custom is set to MEDIUM. What is the effective severity level outcome for the applied policy? - Low Med Least Restrictive - testing Which ePO repository provides all updates to the ePO Master repository? - Source Which is not a type of IPS Signature? - Network Signatures If a connection is in the state table; what action will occur with future traffic for that connection? - Allow Which ePO component gathers the events from the managed systems and communicates them to the ePO server? - McAfee Agent What are the four main types of Permission Sets in ePO? - Executive Reviewer; Global Reviewer; Group Admin; Group Reviewer To manually move a system from one group to another; you do which two things with the system to move it to the other group? - A. Drag and drop - testing Which ePO core component enforces the policies on the systems? - McAfee Agent In the Client Task Catalog you can export all of your client tasks into an XML file that can be imported into another ePolicy Orchestrator Server. - True From this list select the format that you cannot export your query results to. - DOC - testing Each Firewall Rule provides a set of conditions that which of the following has to meet? - B. Computers - testing Which IPS policy determines what options are available to a client computer with a HIPS client; including; whether or not the client icon appears in the system tray; types of intrusion alerts; and password to allow access to the client user interface? - D. Client UI - testing Which of the following is not a protection level defined in the IPS Protection Policy? - C. Log - testing What are the four severity levels of signature in HIPS? - High, Medium, Low, Informational The Client Task Catalog allows you to create which of the following? - B. Client task objects - testing To verify that the IP address sorting criteria that has not been configured to overlap between different groups; you can use which of the following options? - C. Check IP Groups - testing Which of the following is a valid statement regarding the task of managing policies in ePO? - B. When you assign a new policy to a particular group of the Directory; then all systems under that group with inheritance intact will inherit the