HBSS 501 Exam UPDATED QUESTIONS AND CORRECT ANSWERS

HBSS 501 Exam UPDATED QUESTIONS
AND CORRECT ANSWERS
1. CND Services include Prepare; Protect and _________ - CORRECT ANSWER -Respond



2. What action should be taken if an event is found to be a false positive? - CORRECT
ANSWER -Start the tuning process



3. Which product is responsible for collecting endpoint properties and policy enforcement? -
CORRECT ANSWER -McAfee HIPS (?)



4. What is the correct order for prioritizing events? - CORRECT ANSWER -Severity; Action
Taken; Volume



5. An admin creates ___________ to manage the software installed on the endpoint. - CORRECT
ANSWER -Policies



6. Which HIPS label shows the friendly name of a HIPS event? - CORRECT ANSWER -
Signature Name



7. Which of the following is not true about ArcSight and situational awareness? - CORRECT
ANSWER -Prevention



8. In order to manage an endpoint; ___________ must be installed. - CORRECT ANSWER -
McAfee Agent (?)



9. A dashboard is a collection of __________ shown together in the same location. - CORRECT
ANSWER -Monitors



10. Which VSE label shows the friendly name of a VSE event? - CORRECT ANSWER -Threat
Name