McAfee Advance Threat Defense - Training Quiz

Question

Define Malware ?

Answer 1

Legitimate tool required for daily operation on windows system

Answer 2

Malicious software designed to steal information from owner machine

Answer 3

Key-logger

Answer 4

Multipartite Virus

Answer 5

Stealth Virus

Answer 6

Polymorphic Virus

Answer 7

Excellent procedure for malware analysis since user does not need to take any event action or execute the file

Answer 8

User has to perform Action like event execution for the malware to note its behaviour

Answer 9

user should just wait for malware timer to expire and analyze result

Answer 10

Automatically infects and spreads from computer to compute

Answer 11

Appears as a useful program to encourage propegation

Answer 12

Can only be spread through a network

Answer 13

Cannot be spread via social media

Answer 14

McAfee Web Gateway

Answer 15

McAfee NSP

Answer 16

McAfee Firewall Enterprise

Answer 17

McAfee Email Gateway

Answer 18

Static malware analysis utilizes the computational capabilities of the platform to do in moments what a team of researchers could take weeks to accomplish. During static analysis any packed malware is unpacked. Often malware is packed to compress and modify the mal- ware in an attempt to frustrate efforts to analyze it. ATD has phenom- enal success in unpacking malware. The malware code is disassem- bled and reviewed to determine what would happen if the malware was successful in its function. It is important to note that the static analysis is much more than just header analysis

Answer 19

Static analysis involves running malware in sandbox environment and extract malicious code out of the file and report to the administrator

Answer 20

Static analysis is unique feature of MATD device to perform malware analysis on the malicious file with the help of GAM and GTI only . This identifies the code from the subject file and alert the administrator accordingly.

Answer 21

GTI is McAfee Appliance that can be used with McAfee Products to provide reputation based feature to customer network and information exchange

Answer 22

Global threat input

Answer 23

GTI is reputation database online available and cant be used with McAfee products

Answer 24

Global Threat Intelligence is McAfee’s cloud-based security offering. Using thousands of McAfee intelligent agents and devices, confiden- tial data can be correlated about suspicious files to quickly identify malware and determine changes in the threat landscape. These re- sults can be quickly disseminated throughout the cloud to inhibit the spread of infection

Answer 25

Windows ME

Answer 26

Windows 3.1

Answer 27

Windows 10

Answer 28

Windows 7 Professional (32bit)

Answer 29

None of The Above

Answer 30

Local Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->Sandbox

Answer 31

Local Whitelist -->Local Blacklist -->(sandbox)-->PDF SCAN- Emulation

Answer 32

Local Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->MEG

Answer 33

Local Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->McAfee AV Scan

Answer 34

Set Appliance Name

Answer 35

Set sensor name

Answer 36

Inline mode

Answer 37

Standalone mode

Answer 38

atdadmin/atdadmin

Answer 39

admin/admin

Answer 40

cliadmin/atdadmin

Answer 41

show system status

Answer 42

Wipes all default configuration and keeps network configuration only

Answer 43

Rest admin credentials and removes all the VM images/profile

Answer 44

Resets the active disk to defaults. This deletes all IP addresses, results, logs and VM’s on the active disk and restores it with the backup disk

Answer 45

The Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will NOT remove any virtual machines that have been uploaded to the appliance.

Answer 46

The Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will remove virtual machines that have been uploaded to the appliance.

Answer 47

The Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will remove virtual machines and user configuration from appliance.

Answer 48

is used to backup the active disk to the backup before an upgrade

Answer 49

is used to backup the second disk before an upgrade

Answer 50

is used to backup the redundant disk before an upgrade

Answer 51

whitelist entry update

Answer 52

whitelist entry add

Answer 53

whitelist add

Answer 54

ePO provides user name to ATD

Answer 55

User Machine MAC Address

Answer 56

TARGET OS can be provided to ATD

Answer 57

Type 1 Hypervisor

Answer 58

The support bundle is a .tgz of the system log files, any diagnostic files and some additional miscellaneous log files for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number

Answer 59

The support bundle is a .tgz of the system log files, VM image files and some additional information for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number

Answer 60

The support bundle is a .tgz of the system log files, audit log files and some additional information for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number

Answer 61

Web Access

Answer 62

Ftp Access

Answer 63

Restful Access

Answer 64

Telnet Access

Answer 65

If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3.2.0 and later.

Answer 66

If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3..0.4 only

Answer 67

If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3.0.5 only

Answer 68

Antimalware.Proactive. Absolute

Answer 69

Antimalware.Proactive. Minimum

Answer 70

Antimalware.Proactive. Probablility

Answer 71

10 seconds

Answer 72

20 minutes

Answer 73

10 minutes

	Created by esnlalan over 9 years ago

Next up

McAfee Advance Threat Defense - Training Quiz

Description

Resource summary

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 26

Question 27

Question 28

Question 29

Question 30

Question 31

Question 32

Question 33

Question 34

Question 35

Question 36

Similar