Policy Management Flashcards
What are policies?
Collection of rules and/or settings that make sure features are configured correctly on systems.
what do the features of a policy include?
It is the central locatioin or the creation and management of default custom policies.
What can policy assignment rules do?
Reduce overhead of managing numerous policies for individual users or systems that meet specific criteria while maintaning more generic policies across the system tree.
What is the purpose of policy history?
View and compare policy history entries or revert to a previous versions of a policy.
What does it mean to compare policies?
Users can compare like policies which can be the settings, matches and differences between policies. Many of the values and variables are specific to each product.
Do users need to have the appropriate permissions to view and edit policies?
Yes
What permissions do admins have in regards to policies?
Admins always have permissions to view and edit policies.
What permissions are added to new products and extensions?
None, products and extensions have no permissions by default.
What is policy assignment?
The allocation of a specific named policy object at a specific node w/ in the PO system tree
What is policy inheritance?
The concept of a higher level policy assignment being applied to a lower-level node.
What does creating a policy at system tree level do?
Gives all systems identical settings.
What sections is the Policy Catalog divided into?
Products, Policy Catalog, Policy Details
Are default policies read only or editable?
Read only
Where can policies be edited?
The Policy Catalog and the System Tree.
Who can change policy ownership?
Only the admin or owner of the policy.
What is locking a policy assignment?
• Prevents other users from changing policy assignments settings: In the group where locking took place and in any subgroups.
• Does not prevent a policy from being modified
Prevents breaking inheritance below the point of assignment
What is locking a policy assignment?
Prevents other users from changing policy assignments settings: In the group where locking took place and in any subgroups.
Can be locked at any group within the System Tree
Does not prevent a policy from being modified
Prevents breaking inheritance below the point of assignment
are policies based on user specific or system specific criteria?
BOTH System-based rules: Assigned to managed systems Assigned priority, which can be changed Cannot include user-based criteria
User-based rules:
Assigned to groups, organizational units, or user names
Can include system-based criteria
Enforced when users log into the network
What is the default Enforcement status of policies?
Enforcing.
When are policies enforced?
The agent communicates with the ePO server or the Agent Handler at the configured
agent-to-server communications interval (ASCI)
You send an Agent Wake Up call from the ePO server (updates and enforces policies on the client)
In addition, if the client end user has access to the McAfee Agent Status Monitor (set by the policy), the user can click the Check New Policies button to initiate communication and enforce policy changes.
What is policy history?
When a use changes a setting of the policy.
What will the policy history display?
Policy History
Server task log details
Audit log details
only policies you create in the ppolicy catalog have Policy History entries.
