MA0-101 Online Practice Questions and Answers

Which of the following deployment modes receives a copy of the packet from a mirrored switch port?

A. Redundant

B. SPAN

C. TAP

D. In-line

Why would attacks not be blocked when the Sensor monitoring ports are configured in SPAN mode?

A. Blocking of attacks only occurs when the Sensor is placed in In-line mode

B. Blocking of attacks only occurs when the Sensor is placed in TAP mode

C. The Sensor has not learned to identify these attacks

D. Blocking of attacks only occurs when the Sensor has been configured for failover

Which CLI command is used to determine that the Sensor has established trust with the Manager?

A. config

B. status

C. trust

D. show

Which of the following commands will reestablish the Alert and packet log channel connection between the sensor and manager?

A. Connectalertandpktlogchannels

B. Disconnectalertandptologchannels

C. reconnectalertandpktlogchannets

D. deinstall

Which sensor action detects and drop attacks in real-time?

A. Drop further packets

B. Host Quarantine action

C. TCP reset

D. ICMP host unreachable

Which of the following actions can a Standby Manager of an MDR pair perform?

A. Modify sensor configuration

B. Policy configuration

C. Signature update

D. Configuration backup

What is the command to enable the sensor to forward all traffic at Layer 2 if a failure occurs?

A. Layer2 mode off

B. Layer2modeon

C. Layer2 mode assert

D. Layer2 mode deassert

____________________are required to be configured before configuring the quarantine/pre-admission user classes or the quarantine DHCP server.

A. Integrated DHCP servers

B. Wild Card DNS servers

C. Wins Servers

D. Portal Servers

In L3 mode, a sensor detects an L2 device based on which address?

A. MAC

B. IP

C. Default Gateway

D. DNS

What is the command to force the sensor out of Layer 2 Passthru mode?

A. Layer2 mode off

B. Layer2 mode on

C. Layer2 mode assert

D. Layer2 mode deassert