Quiz
McAfee Advance Threat Defense - Training Quiz
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (36)
1Define Malware ?
- ALegitimate tool required for daily operation on windows system
- BMalicious software designed to steal information from owner machine
- CKey-logger
2Which of the following is not a valid Virus Type with reference to computers? ( Choose correct Answer)
- AMultipartite Virus
- BStealth Virus
- CMERS
- DPolymorphic Virus
3Which of the below best describes Static Analysis of Malware ?
- AExcellent procedure for malware analysis since user does not need to take any event action or execute the file
- BUser has to perform Action like event execution for the malware to note its behaviour
- Cuser should just wait for malware timer to expire and analyze result
4Which of the following is a characteristic of a Trojan?
- A Automatically infects and spreads from computer to compute
- BAppears as a useful program to encourage propegation
- CCan only be spread through a network
- DCannot be spread via social media
5which of the following below product ATD cannot be integrated with ?
- AMcAfee Web Gateway
- BMcAfee NSP
- CMcAfee Firewall Enterprise
- DMcAfee Email Gateway
6Which of the following below statement best describes Static Analysis on MATD Policy ?
- AStatic malware analysis utilizes the computational capabilities of the platform to do in moments what a team of researchers could take weeks to accomplish. During static analysis any packed malware is unpacked. Often malware is packed to compress and modify the mal- ware in an attempt to frustrate efforts to analyze it. ATD has phenom- enal success in unpacking malware. The malware code is disassem- bled and reviewed to determine what would happen if the malware was successful in its function. It is important to note that the static analysis is much more than just header analysis
- BStatic analysis involves running malware in sandbox environment and extract malicious code out of the file and report to the administrator
- CStatic analysis is unique feature of MATD device to perform malware analysis on the malicious file with the help of GAM and GTI only . This identifies the code from the subject file and alert the administrator accordingly.
7Define McAfee GTI ?
- AGTI is McAfee Appliance that can be used with McAfee Products to provide reputation based feature to customer network and information exchange
- BGlobal threat input
- CGTI is reputation database online available and cant be used with McAfee products
- DGlobal Threat Intelligence is McAfee’s cloud-based security offering. Using thousands of McAfee intelligent agents and devices, confiden- tial data can be correlated about suspicious files to quickly identify malware and determine changes in the threat landscape. These re- sults can be quickly disseminated throughout the cloud to inhibit the spread of infection
8Which of the below file type is not supported by ATD appliance ?
- A.exe
- B.pub
- C.apk
- D.zip
- E.rar
9Which of the below is Supported OS for ATD VM Creation
- AWindows ME
- BWindows 3.1
- CWindows 10
- DWindows 7 Professional (32bit)
- ENone of The Above
10Which of the following is supported language for Windows VM on ATD device ?
- AArabic
- BBangla
- CMalay
- DJapanese
11Which of the below is the correct order of ATD Static Analysis scan ?
- ALocal Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->Sandbox
- BLocal Whitelist -->Local Blacklist -->(sandbox)-->PDF SCAN- Emulation
- CLocal Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->MEG
- DLocal Whitelist -->Local Blacklist -->(GAM Emulation)-->GTI Reputation-->McAfee AV Scan
12Which port is used for SSH into ATD Appliance ?
- A21
- B22
- C2211
- D2222
13Which of the following below is the correct BAUD rate for Serial connection to ATD device ?
- A115000
- B38400
- C119200
- D115200
14Which of the following is correct command to set ATD appliance name( CLI) ?
- ASet Appliance Name
- BSet Name
- CSet sensor name
15Which is the default credential for ATD web admin console login ?
- Aadmin123
- Badmin123$
- Cadmin
16What of the following mode is currently supported for deployment of ATD appliance ?
- AInline mode
- BSPAN MODE
- CStandalone mode
- DTAP MODE
17which of the following below is correct credential for CLI login to ATD ( Above Version 3.2.0) ?
- Aatdadmin/atdadmin
- Badmin/admin
- Ccliadmin/atdadmin
18Which of the following below command can be used to view ATD Appliance details ( System IP, Software Version )?
- AStatus
- Bshow system status
- Cshow
19What is the result of the command "Factorydefault" ?
- AWipes all default configuration and keeps network configuration only
- BRest admin credentials and removes all the VM images/profile
- CResets the active disk to defaults. This deletes all IP addresses, results, logs and VM’s on the active disk and restores it with the backup disk
20What is the maximum number of VM supported on ATD 6000 Appliance ?
- A30
- B45
- C50
- D60
21what does Reset database option do the ATD device configuration (if checked while upgrade)?
- AThe Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will NOT remove any virtual machines that have been uploaded to the appliance.
- BThe Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will remove virtual machines that have been uploaded to the appliance.
- CThe Reset Database checkbox will reset all analyzer policies and VM profiles and delete any analysis samples on the ATD appliance. This will remove virtual machines and user configuration from appliance.
22Command " Copy to backup"
- Ais used to backup the active disk to the backup before an upgrade
- Bis used to backup the second disk before an upgrade
- Cis used to backup the redundant disk before an upgrade
23What is the correct command to add whitelist entry to ATD Appliance ?
- Awhitelist entry update
- Bwhitelist entry add
- Cwhitelist add
24Can you delete default ATD admin user account ?
- AYes
- BNo
25Which protocol is used for integration with McAfee Web Gateway and ATD ?
- ASMP
- BSAML
- CREST
26What is benefit of ePO integration with ATD device ?
- AePO provides user name to ATD
- BUser Machine MAC Address
- CTARGET OS can be provided to ATD
27ATD Architecture is based on
- AVMWARE
- BHYPER-V
- CType 1 Hypervisor
28Define Support Bundle ?
- AThe support bundle is a .tgz of the system log files, any diagnostic files and some additional miscellaneous log files for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number
- BThe support bundle is a .tgz of the system log files, VM image files and some additional information for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number
- CThe support bundle is a .tgz of the system log files, audit log files and some additional information for McAfee Customer Support. After clicking the button a prompt is given for a McAfee Support Ticket number
29which of the following is not a default user account on ATD appliance ?
- Aadmin
- Bmwg
- Cnsp
- Datdadmin
- Eapoadmin
30which of the following is not a default role on ATD appliance ?
- AAdmin
- BWeb Access
- CFtp Access
- DRestful Access
- ETelnet Access
31What is real internet mode ?
- A If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3.2.0 and later.
- B If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3..0.4 only
- C If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3.0.5 only
- A If Internet connectivity is enabled in the analyz- er profile, McAfee Advanced Threat Defense uses this mode. McAfee Advanced Threat Defense provides a real Internet connection through the management port, which is publicly routed as directed by the ATD network configuration. The interface port that ATD uses to connect to the internet using this mode can be designated in ATD 3.2.0 and later.
32what is the property used in McAfee Web Gateway ruleset for Anti malware threshold trigger ?
- A Antimalware.Proactive. Absolute
- B Antimalware.Proactive. Minimum
- C Antimalware.Proactive. Probablility
33What is the value of Scan timeout of MWG appliance for ATD analysis results ?
- A10 hours
- B10 seconds
- C20 minutes
- D5 seconds
- E10 minutes
34what is minimum version of Web Gateway required to support ATD device ?
- A7.1.0
- B7.3.0
- C7.3.2
- D7.4.x
35What is maximum supported file size limit for malware analysis (send file) from NSP ?
- A10 MB
- B15 MB
- C20 MB
- D128 MB
- E25 MB
36ATD appliances are only involved in the Detection & Analysis step of an Incident Response cycle ?
- ATrue
- BFalse
Information
- Description
- McAfee Advance Threat Defense - Training Quiz
- Author
- esnlalan
- Language
- English
- Views
- 174
- Tags
- Rating
- No ratings yet Rate this quiz