EMT Practice Test

1. Question Content...

---

Question1: Select the deployment method which enables the most effective Protection/Prevent on mode of operation.

Question2: In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Question3: Which of the following deployment modes is not included in standard NAC?

Question4: What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Question5: A sensor is placed in-line and is dropping traffic. This situation demands an immediate removal of the sensor from the network to let traffic flow uninterrupted. Which option will you use to verify whether the issue is due to sensor configuration or network congestion?

Question6: If the Health level of a Host cannot be determined. McAfee NAC assigns which of the following System Health levels to that Host?

Question7: Which of the following CLI commands will not cause an automatic reboot of the Sensor?

Question8: _____________________are a set of Access Control List (ACL) rules that define network access provided to a host, subject to Network Access Control.

Question9: Which sensor action allows the detection and dropping of attacks in real-time?

Question10: Which of the following rules do sub-interfaces inherit when they are created?

Question11: In double VLAN tagging, a second VLAN tag that is inserted into the frame is referred to as which of the following?

Question12: Setting a threshold to allow an IPS to react when traffic volume exceeds the set limit is an example of what type of detection method?

Question13: Which port is correctly defined for the Alert Channel on the Network Security Manager?

Question14: Which of the following options is the best practice to use if you need to edit all attacks with a specific seventy number within an IPS policy?

Question15: Malware Protection requires which of the following feature or features to be enabled?

Question16: Which is the correct syntax for the 'set dosprevenbonseverity' command?

Question17: What is the command to enable the sensor to forward all traffic at Layer 2 if a failure occurs?

Question18: Which of the following cannot be configured at the sub-interface level?

Question19: When McAfee NAC reports the host status as unmanaged with an Unknown Hearth Level, the sensor redirects the host to which of the following?

Question20: Where in the Network Security Manager console can you see a hierarchical view of all the installed applications currently deployed and the resources associated with each?

Question21: ________________allows a host to be subjected to both DHCP based NAC and Identity Based Access Control when configured on different ports.

Question22: Which policy is assigned to a child domain by default?

Question23: Which port needs to be opened for install Channel communication between Sensor and Manager through a firewall?

Question24: Which of the following is the proper step to take if an IP address change is made to the server where the Network Security Manager has been installed?

Question25: Which of the following modes can be used to implement DoS detection? (Choose two)

Question26: As a recommended best practice, what is the total number of sensors that should be managed through a single Network Security Manager installation?

Question27: Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

Question28: Why is the DBAdmin tool considered a preferred method of performing system maintenance tasks that could be performed within the Manager?

Question29: Policies can be configured to drop packets when which of the following has been defined?

Question30: DoS detection is implemented in which of the following modes? (Choose two)

Question31: Which operating mode allows a sensor lo prevent attacks from reaching their intended targets?

Question32: Which of the following CLI commands removes trust between a sensor and manager, removes signatures and restores default port settings, but retains IP configuration?

Question33: Alert fillers can be applied lo which of the following sensor nodes?

Question34: Which of the following is the correct extension for a Sensor image imported into the Manager?

Question35: Which of the following are the different operational modes of System Health based NAC? (Choose three)

Question36: What is the command to force the sensor out of Layer 2 Passthru mode?

Question37: Which step needs to be completed before a sensor can be configured?

Question38: When creating policies, which of the following rule sets are available for selection within those policies?

Question39: The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Question40: Which sensor action detects and drop attacks in real-time?

Question41: Which logs are used to determine who was logged into the Manager the last time a signature set update was pushed from the Manager to the Sensor?

Question42: Identity Based Access Control cannot co-exist with which mode of NAC deployment on the same port?

Question43: Which CLI command is used to determine that the Sensor has established trust with the Manager?

Question44: Which of the following actions can a Standby Manager of an MDR pair perform?

Question45: Which of the following should be applied to policies in both Inbound and Outbound directions?

Question46: Performance debugging mode can be enabled on a sensor for a specified time duration by issuing which of the following CLI commands?

Question47: Which database is supported for Network Security Manager?

Question48: Which NSP sensor models support VLAN Bridging? (Choose three)

Question49: Which of the following CLI commands only removes trust between a sensor and manager?

Question50: Which mode is used when certain hosts are located on the same network as a sensor and other hosts enter through a router or VPN?

Question51: A Sensor allows the option of Layer2 forwarding for which of the following?

Question52: Why would attacks not be blocked when the Sensor monitoring ports are configured in SPAN mode?

Question53: What type of encryption is used for file transfers between the Sensor and the Manager?

Question54: Which port needs to be opened for Packet Log Channel communication between Sensor and Manager through a firewall?

Question55: Reconnaissance Policies can be applied to which of the following sensor nodes?

Question56: Which type of NAC configuration allows a host to be subjected to both DHCP and IBAC based NAC when configured on different ports?

Question57: Which CLI command is used to copy sensor SSL certificates from external flash when replacing a failed sensor?

Question58: Which of the following commands will reestablish the Alert and packet log channel connection between the sensor and manager?

Question59: ____________________are required to be configured before configuring the quarantine/pre-admission user classes or the quarantine DHCP server.

Question60: Which of the following information is unique to Host Intrusion Prevention alerts? (Choose three)

Question61: Which mode needs to be set to redirect an unmanaged system to the guest portal?

Question62: Which of the following methods are available for upgrading a Sensor image?

Question63: Which command allows an off-line signature file download from a tftp server when connectivity to the Manager is unavailable?

Question64: A Reconnaissance Policy can be applied to which of the following?

Question65: Which port needs to be opened for Alert Channel communication between Sensor and Manager through a firewall?

Question66: Which attack cannot be blocked when the sensor has been set for in-line mode?

Question67: When the buffer on the alert cache has been filled, what happens to current incoming alerts?

Question68: How are packet logs viewed from within the Manager?

Question69: What is the CLI command that enables the output of the MAC/IP address mapping table to the sensor debug files?

Question70: Which port needs to be opened for Alert Viewer communication between Client and Manager through a firewall?

Question71: If the Health Level of the host cannot be determined, which of the following System Health Levels would be assigned?

Question72: Which command can be issued on a Sensor to check the health of the Sensor?

Question73: Which command is used to manually download signature tiles from the tftpserver when connectivity to the Manager is not available?

Question74: Setting a threshold limit in order for the IPS to react if traffic volume exceeds this limit is an example of which type of detection method?

Question75: When placed in Layer3 mode, a Sensor detects a Layer2 device based on which of the following?

Question76: Which server type needs to be configured as a requirement before the Quarantined user classes and Quarantined DHCP server(s) are configured?

Question77: Which of the following items can an ACL not match?

Question78: Which NSP sensor models support SSL encryption? (Choose three)

Question79: IPS Policies can be enforced at which of the following sensor nodes?

Question80: Which domains does a Super User have full rights to access?

Question81: McAfee recommends which of the following methods to cable the heartbeat connection of a sensor failover pair?

Question82: Identity Based Access Control cannot co-exist with which mode of NAC deployment on the same port?

Question83: In L3 mode, a sensor detects an L2 device based on which address?

Question84: Setting a threshold on a sensor to react if traffic volume exceeds the threshold limit is an example of what specific detection method?

Question85: A sensor will redirect the host to which of the following when McAfee NAC reports the Host status as
"unmanaged with an Unknown Health Level"?

Question86: Which of the following activities require a reboot of a sensor? (Choose three)

Question87: By default, sensors are configured to operate in which operating mode?

Question88: What type of encryption is used for packet log transfers between the Sensor and the Manager?