DISA HBSS 201 ADMIN EPO5.1 (2016)
DISA HBSS 201 Admin ePO5.1 (2016 Version) - Answers- Pull Task
What can be created to prevent interpreting a normal behavior as an attack? -
Answers- Exception
Which executable runs the main HIPS service? - Answers- Firesvc.exe
How do yo uninstall the HIPS 7.0 client for Windows from a managed system? -
Answers- Remove the extension from the ePO Server and initiate the McAfee Agent
wakeup call.( double check answer)
Assume three IPS policies are applied to a node; 1 default and 2 custom. The default
severity level is set to HIGH; 1 custom severity level is set to LOW and the other custom
is set to MEDIUM. What is the effective severity level outcome for the applied policy? -
Answers- Low
Med
Least Restrictive - testing
Which ePO repository provides all updates to the ePO Master repository? - Answers-
Source
Which is not a type of IPS Signature? - Answers- Network Signatures
If a connection is in the state table; what action will occur with future traffic for that
connection? - Answers- Allow
Which ePO component gathers the events from the managed systems and
communicates them to the ePO server? - Answers- McAfee Agent
What are the four main types of Permission Sets in ePO? - Answers- Executive
Reviewer; Global Reviewer; Group Admin; Group Reviewer
To manually move a system from one group to another; you do which two things with
the system to move it to the other group? - Answers- A. Drag and drop - testing
Which ePO core component enforces the policies on the systems? - Answers- McAfee
Agent
In the Client Task Catalog you can export all of your client tasks into an XML file that
can be imported into another ePolicy Orchestrator Server. - Answers- True
From this list select the format that you cannot export your query results to. - Answers-
DOC - testing
DISA HBSS 201 Admin ePO5.1 (2016 Version) - Answers- Pull Task
What can be created to prevent interpreting a normal behavior as an attack? -
Answers- Exception
Which executable runs the main HIPS service? - Answers- Firesvc.exe
How do yo uninstall the HIPS 7.0 client for Windows from a managed system? -
Answers- Remove the extension from the ePO Server and initiate the McAfee Agent
wakeup call.( double check answer)
Assume three IPS policies are applied to a node; 1 default and 2 custom. The default
severity level is set to HIGH; 1 custom severity level is set to LOW and the other custom
is set to MEDIUM. What is the effective severity level outcome for the applied policy? -
Answers- Low
Med
Least Restrictive - testing
Which ePO repository provides all updates to the ePO Master repository? - Answers-
Source
Which is not a type of IPS Signature? - Answers- Network Signatures
If a connection is in the state table; what action will occur with future traffic for that
connection? - Answers- Allow
Which ePO component gathers the events from the managed systems and
communicates them to the ePO server? - Answers- McAfee Agent
What are the four main types of Permission Sets in ePO? - Answers- Executive
Reviewer; Global Reviewer; Group Admin; Group Reviewer
To manually move a system from one group to another; you do which two things with
the system to move it to the other group? - Answers- A. Drag and drop - testing
Which ePO core component enforces the policies on the systems? - Answers- McAfee
Agent
In the Client Task Catalog you can export all of your client tasks into an XML file that
can be imported into another ePolicy Orchestrator Server. - Answers- True
From this list select the format that you cannot export your query results to. - Answers-
DOC - testing
