MA0-103 Online Practice Questions and Answers

To determine baseline conditions for DLP implementation, which of the following actions can the DLP End point Administrator perform?

A. Configure database statistics

B. Run the Policy Analyzer

C. Configure backward compatibility

D. Perform testing with various groups

Which of the following protocols cannot be blocked or monitored by McAfee DLP 'Network Communication Protection Rules'?

A. Secure FTP (SFTP)

B. Secure Copy (SCP)

C. Server Message Block/NetBIOS (SMB)

D. Secure Shell (SSH)

An employee attempts to copy sensitive data from the Oracle HR database into a Microsoft Word document. To prevent a violation of employee privacy, what actions should the administrator define in the DLPe rule?

A. The paste should be blocked

B. The paste should be monitored, and the employee notified

C. The paste should be encrypted and stored pending further evaluation of the data being copied

D. The file access protection should be blocked and the employee's system locked down

Managed McAfee DLPe clients receive the Global Policy through which of the following?

A. Active Directory Group Policy.

B. McAfee Agent ASCI.

C. Shared Folder defined in the local registry.

D. Internal Software Distribution Tool.

How does McAfee DLPe classify sensitive content?

A. Using DLP monitor reaction in rules

B. Using Tags and Content categories

C. Using File Extensions

D. Using Information Protection

The DLP End point administrator needs to prevent sensitive data from being transmitted over FTP. Which Rule can be configured to meet this requirement?

A. File System Protection Rule

B. Cloud Protection Rule

C. Application File Access Protection Rule

D. Network Communication Protection Rule

A manufacturing organization needs to protect the transfer of sensitive design documents by prohibiting write access to USB devices. They do not want to limit their employee's ability to read files from these devices. To meet the organization's requirement, which type of rule can be implemented?

A. Plug and Play Device Rule

B. Removable Storage Protection Rule

C. Removable Storage Device Rule (supports Mac)

D. Removable Storage File Access Rule

Which of the following is an authorized method to remove the McAfee DLPe Agent?

A. ePO product deployment task

B. Agent override

C. Add the computer to a privileged user group

D. ePO server task

An executive sends merger documents to legal counsel. Policy dictates the documents should be encrypted, but they are being sent in plain text. What is the appropriate action to configure in such a case using DLPe protection rules?

A. Monitor the activity using a File System Protection Rule, store the evidence and notify the user.

B. Verify the violation and send an alert to the administrator.

C. An Email Protection Rule should be used to block the email unless the documents are encrypted.

D. Do nothing.

Which encryption type is NOT available when creating a file system discovery rule?

A. Oracle Digital Rights Management

B. McAfee Endpoint Encryption

C. Adobe LiveCycle Rights Management Encryption

D. Not encrypted

Prior to editing the production DLP Endpoint Policy a backup copy should be taken as a precaution. Which method can the DLP Administrator use to backup rules based on User Assignment Groups?

A. The DLP Policy, File, Export Policy to HTML feature

B. The DLP Policy, File, Synchronize Templates feature

C. The McAfee ePolicy Orchestrator Policy Catalog feature

D. The DLP Policy, File, Save as feature

McAfee DLP Agent functionality in Windows Safe Mode is controlled by which of the following?

A. DLP Agent Configuration policy

B. ePO Server Settings Page

C. Agent watchdog

D. DLP Global Policy

There is a known virus spreading using removable media; What action should be taken to mitigate this risk?

A. Monitor all removable media devices

B. Enable McAfee endpoint encryption controls

C. Block all removable media devices

D. Make plug and play devices read only

Which of the following is an indication of potential data loss?

A. Removable Storage Device rule triggers a lot of incidents for one user

B. Removable Storage File Access rule triggers a lot of incidents for one user

C. Discovery rule triggers a lot of incidents for one user

D. Removable Storage Protection rule triggers a lot of incidents for one user

Which of the following is an example of structured data that may be identified using Regular Expressions?

A. First and last names

B. Social Security numbers

C. Physical addresses

D. Email domain