HBSS 301 ePO5.3 Test

HBSS 301 ePO5.3 Test How does the Rogue System Sensor find rogue machines on the network? - N: The sensor listens passively to layer 2 broadcasts. The Rogue System Sensor determines if a machine is a rogue system - 2.fALSE - right How many sensors must be installed for complete coverage? - 2. 1 in each broadcast segment An agent handler installation includes only which of the following? - 2. Apache and Event Parser Within an Agent Handler group; if the handler with the highest priority is unavailable; the agent will fall back to the handler with the next highest priority - 2. FALSE What component of HBSS provides administrators with the ability to block the use of removable storage devices? - DLP It is required to restart the client computer after the DLP agent has been installed. - 2. TRUE In the DLP Agent Configuration for Notifications; to append the name of the file/device/etc. - Add which of the following? - B:%s DLP/DCM Plug and Play devices can be identified by which of the following? - B:Device classes Device Control policies are configured using which of the following? - B:DLP Policy Manager (correct) The DLP/DCM Agent main agent logic executable is which of the following? - A.FCAG.exe When using a McAfee Agent Deployment task; it is required to create an agent override key to remove the Host DLP/DCM Agent. - 2. FALSE - right Which of the following monitors the Host DLP/DCM Agent; and restarts it if it stops running for any reason? - Which of the following drivers is the only driver that is mandatory when using the DLP/DCM and is also responsible to evaluate the device blocking rules? - 1. File Device Select a valid DLP/DCM Device Class status from the options below - 1. Configured A DLP/DCM GUID is which of the following? - 1. Unique Device Identifier To edit a Benchmark it is required to access which of the following in ePO? - Benchmark Catalog To use a selected Benchmark in an audit it is required to do which of the following to the Benchmark? - 1. Activate The Policy Auditor Agent is only supported on Windows platforms.