[2026] McAfee Certified Product Specialist - ENS

문제1

The ePO administrators have already tuned and configured dynamic application containment rules within the policy. In which of the following ways will dynamic application containment protect against malware once enforcement is enabled?

A. If an application's reputation is below the threshold while triggering a block rule and is not an excluded application, malicious behavior of the application will be contained.

B. The ENS client will receive the reputation as "highly suspicious" from either the McAfee GTI or TIE server, and then immediately uninstall the application on the system.

C. The scan engine will learn the behavior of the application and send up to GT1 for analysis, and then receive an action to block all actions from the application's process.

D. The adaptive threat protection scanner will send the file automatically to a preconfigured "Sandbox" folder and analyze the application for malicious features before use.

정답: A

문제2

Which of the following fields can an ePO administrator use when creating exclusions for Dynamic Application Containment?

A. File version

B. MD5 hash

C. Certificate

D. Rule

정답: B

문제3

Organizational security policy requires a host-based firewall on endpoints. Some endpoints have applications where documentation depicting network traffic flows is not readily available. Which of the following ENS
10.5 firewall features should be used to develop rules for their firewall policy?

A. Location-aware Groups

B. Trusted Executables

C. Adaptive Mode

D. Trusted Networks

정답: D

문제4

A user goes to four different websites, each with a different rating. One of the four sites is blocked and unable to be accessed. Using default configuration to determine the rating, which of the following ratings does this site have?

A. Yellow

B. Gray

C. Red

D. Green

정답: B

문제5

When planning for a policy migration, in which of the following circumstances should automatic migration be used, rather than manual migration?

A. When migrating settings to single-platform policies

B. When using multiple custom policies

C. When migrating smaller environments

D. When fine-tuning assignments

정답: B

문제6

The ENS administrator wants to monitor remotely the modification of files, but BigFix.exe is generating many false positives. Which of the following should the ENS administrator do?

A. Exclude the file under Common Options / Self Protection.

B. Add the file under Threat Prevention / Options/ Exclusions by detection name.

C. Exclude the file under Threat Prevention / Access Protection / Remotely creating or modifying Files or Folders.

D. Add the file as a High Risk Process under Threat Prevention / On Access Scan / Process settings.

정답: A

문제7

An administrator suspects that Self Protection is preventing local installation of a patch. Which of the following log levels should the administrator review?

A. Debug logging

B. Activity logging

C. High severity logging

D. Event logging

정답: C

McAfee Certified Product Specialist - ENS - MA0-107무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트