← Back to exam page

MA0-104 – Intel Security Certified Product Specialist

Loading demo links...

Showing 1–3 of 10 questions

Question 1

On the McAfee enterprise Security Manager (ESM), the default data Retention setting specifies that Event and Flow data should be maintained for

Select an option, then click Submit answer.

  • ○

    365 days.
  • ○

    same value as configured on the ELM.

  • ○

    90 Days
  • ○

    all data allowed by system

Question 2

Reports can be created by selecting the ESM System Properties window, the Reports Icon in the top right of the ESM screen or by which of the following other method selecting the ESM System Properties window, the Reports Icon in the top right of the ESM screen or by which of the following other methods within Alarm Creation?

Select an option, then click Submit answer.

  • ○

    Actions tab
  • ○

    Conditions tab
  • ○

    Escalation tab
  • ○

    Summary tab

Question 3

Checkpoint firewalls provide logs to the McAfee SIEM Receiver in which of the following formats?

Select an option, then click Submit answer.

  • ○

    Syslog
  • ○

    open Platform for Security (OPSEC)
  • ○

    McAfee Event Format (MEF)
  • ○

    Common Event Format (CEF)