MA0-104

Review 70 MA0-104 practice questions with answer explanations and community insights.

Question 1

The historical ACE function allows the user to perform retrospective correlations on older data. In which of the following devices is the data located that the historical correlation engine uses?

  1. ELM
  2. REC
  3. ADM
  4. ESM

Question 2

When preparing to apply a patch to the Enterprise Security Manager (ESM) and completing the ESM checklist, the command cat/proc/mdstat has been issued to determine RAID functionally. The system returns an active drive result identified as [U_]. What action should be taken?

  1. Apply the patch, this is a properly functional RAID which can be upgraded.
  2. Apply the patch, drive 1 is active and can be upgraded
  3. Apply the patch, drive 2 is active and can be upgraded
  4. Contact support before proceeding with the upgrade

Question 3

The McAfee Advanced Correlation Engine (ACE) can be deployed in one of two modes which are

  1. Threshold and Anomaly.
  2. Prevention and Detection.
  3. Stateful and Stateless.
  4. Historical and Real-Time.

Question 4

The Database Event Monitor (DEM) appliance prevents disclosure of Personally Identifiable Information (PII) by employing which of the following features to those types of information?

  1. Obfuscation masks
  2. PII filter masks
  3. Sensitive data masks
  4. Filter masks

Question 5

One or more storage allocations, which together specify a total amount of storage, coupled with a data retention time that specifies the maximum number of days a log is to be stored, is known as a

  1. Storage Volume.
  2. Storage Pool.
  3. Storage Device.
  4. Storage Area Network (SAN).
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.