Pass the McAfee NSP Certification MA0-101 Questions and answers with CertsForce

Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions
Questions # 11:

What type of encryption is used for alert channel (control channel) communication between the Sensor and the Manager?

Options:

A.

SSL with RC4


B.

SSL with MD5


C.

SSL with RC4 and MD5


D.

DES


Questions # 12:

Which port needs to be opened for install Channel communication between Sensor and Manager through a firewall?

Options:

A.

8501


B.

8502


C.

8503


D.

8555


Questions # 13:

Which of the following cannot be configured at the sub-interface level?

Options:

A.

DoS Learning Mode


B.

Assigned Policy


C.

Attack Filters


D.

Interface type


Questions # 14:

In double VLAN tagging, the second VLAN tag inserted into the frame is called the:

Options:

A.

Customer Identification tag (CD)


B.

VLAN Identifier tag (VID)


C.

Outer Identifier tag (OID)


D.

Inner Identifier tad (ID)


Questions # 15:

Which of the following are the different operational modes of System Health based NAC? (Choose three)

Options:

A.

Audit


B.

Simulation


C.

Enforcement


D.

Prevention


E.

Quarantine


Questions # 16:

Which of the following CLI commands removes trust between a sensor and manager, removes signatures and restores default port settings, but retains IP configuration?

Options:

A.

Resetconfig


B.

Deletesignatures


C.

Factotydefaults


D.

Deinstall


Questions # 17:

What is the CLI command that enables the output of the MAC/IP address mapping table to the sensor debug files?

Options:

A.

arp spoof status


B.

arp spoof enable


C.

arp dump


D.

arp flush


Questions # 18:

Select the deployment method which enables the most effective Protection/Prevent on mode of operation.

Options:

A.

in-line


B.

SPAN


C.

TAP


D.

failopen


Questions # 19:

If the Health Level of the host cannot be determined, which of the following System Health Levels would be assigned?

Options:

A.

Fair


B.

Poor


C.

Serious


D.

Unknown


Questions # 20:

The Network Security Manager provides the following built-in Network Access Zones. (Choose three)

Options:

A.

Allow DNS Access


B.

Allow Full Access


C.

Public Network Only


D.

Allow DHCP Access


E.

Allow Intranet Access


Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions