Exam Questions and CORRECT Answers
CND Services include Prepare; Protect and ____________ - CORRECT ANSWER -
Respond
What action should be taken if an event is found to be a false positive? - CORRECT
ANSWER - Start the tuning process
Which product is responsible for collecting endpoint properties and policy enforcement? -
CORRECT ANSWER - McAfee Agent
What is the correct order for prioritizing events? - CORRECT ANSWER - Severity;
Action Taken; Volume
An admin creates ___________ to manage the software installed on the endpoint. - CORRECT
ANSWER - Policies
Which HIPS label shows the friendly name of a HIPS event? - CORRECT ANSWER -
Signature Name (Host IPS)
Which of the following is not true about ArcSight and situational awareness? - CORRECT
ANSWER - Prevention
In order to manage an endpoint; ___________ must be installed. - CORRECT ANSWER -
McAfee Agent
A dashboard is a collection of __________ shown together in the same location. - CORRECT
ANSWER - Monitors