McAfee MA0-107 - McAfee Certified Product Specialist - ENS
A company's security posture requires the ENS firewall to be enabled; however, the team is unsure of communication flows in the environment. In which of the following modes should the ePO administrator deploy the firewall policy to achieve flow awareness?
A hospital in another county just received a new variant of ransomware that infected 70% of its systems. After learning the characteristics of this ransomware, the security team wants to implement a protection policy to stop certain files from being modified and new registry keys from being created that are relevant to the ransomware. Which of the following policies meets this requirement?
A security professional is configuring ENS for a client and wants to ensure applications will be prevented from executing software locally from the browser or email client. Which of the following McAfee-defined rules should be implemented?
An administrator wants to exclude folder ABC on various drives. In which of the following ways should the administrator list the exclusion in the policy?
The ePO administrator sees the ENS firewall has been disabled on an endpoint in ePO. The end user states that no changes were made to the McAfee products on the endpoint in question. Which of the following questions should the administrator ask the end user about the McAfee icon to validate that the ENS firewall might be disabled?
Which of the following items are sent to the cloud when Real Protect scanning is enabled on endpoints that are connected to the Internet?
An administrator suspects that Self Protection is preventing local installation of a patch. Which of the following log levels should the administrator review?
An ENS administrator wants to dynamically create firewall rules required for the environment. In Enable Firewall Policies/Options, which of the following should be utilized?
An administrator wants to prevent incoming packets until the system reboots fully. Which of the following features should be configured to allow this?
An administrator wants to allow remote users the ability to access the Internet from unsecure WiFi access points to connect to the VPN. Which of the following ENS 10.5 features should the administrator use to accomplish this?