Server and Client Tasks Flashcards

1
Q

What is the role of server and client tasks?

A

Allows you to automate ePO and managed system processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

T/F: The addition of new products can add preconfigured server and client tasks?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are server tasks?

A

Configurable actions that run on ePO at scheduled times or intervals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a good use of server tasks?

A

Automating repetitive tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where can you go to see the status of the server tasks that have been run?

A

The server task log

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What details are offered in the Server Task Log?

A

Provides the status of your server tasks and displays any error that might have occured

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the different server task statuses that you might see displayed in the server task log?

A

Waiting -Server task is waiting for another task to finish

In Progress - Server task has started, but not finished

Paused - A user has paused the server task

Stopped - A user stopped the server task

Failed - The server task started, but did not finish successfully

Completed - The server task finished successfully

Pending Termination - A user requested that the server task end

Ended - A user closed the server task manually before it finished

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the best practice regarding maintenance of the server task log?

A

Periodically remove old server task entries form the Server Task Log to improve database performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the two ways that you can purge the server task log?

A

Manually from the server task log page itself, and automatically by configuring a server task with “Purge Server Task Log” as the action

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is cron syntax?

A

A syntax for scheduling that is made up of 6 or 7 fields. It is advantageous in that it allows for the creation of very specific schedules such as the 3rd friday in every other month

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are Client Tasks (in ePO)?

A

A way to schedule and automate endpoints tasks in your network. (Endpoint tasks being that tasks that are carried out by your endpoint security products)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How does the Client Task Catalog work?

A

Allows you to create client task objects you can reuse to help manage systems in your network.

It applies the concept of logical objects to ePO client tasks, allowing you to create Client Task Objects for various purposes without the need to assign them immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

T/F: Client Task Assignments function the same as Policy Assignments in the System Tree in regards to inheritance?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

T/F: You can’t choose specific levels of the System Tree to assign Client Tasks to

A

False, Client Tasks can be assigned at any level in the System Tree

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How does sharing work in regards to client task objects?

A

Client Task Objects can be shared across multiple registered ePO servers in your environment

You can leverage a “Share Client Task” server task to run on a schedule, making it so that any changes that are made to the source tasks that are being shared are updated each time it runs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

T/F: After a Client Task is shared to a destination server the admins on that server become the owners of the task.

A

False, none of the users on the target server is owner for any of the shared task objects the target receives

17
Q

What are deployment task?

A

Client tasks that are used to deploy managed security products to your managed systems from the Master Repository.

18
Q

What are some important considerations that need to be made when deciding how to stage your Product Deployment?

A
  • Package size and available bandwidth between the Master Repository and Managed Systems. In addition to potentially overwhelming the e-poh server or your network, deploying products to many systems can make troubleshooting problems more complicated
  • A phased rollout to install products to groups of systems at a time. If your network links are fast, try deploying to several hundred clients at a time. If you have slower or less reliable network connections, try smaller groups
  • Monitoring the Deployment, run reports to confirm successful installations, and troubleshoot any problems with individual systems
19
Q

Why is it a good idea to configure product policy settings prior to deploying the respective products

A

Saves time and ensures that systems are protected as soon as possible. Sometimes, the default settings for certain products can cause issues with certain endpoints in your network (ie if the proper exclusions aren’t made in scanning policies, or if the default firewall rules policy blocks important network traffic

20
Q

What are the supported package types that can be checked into the master repository with pull tasks, or manually?

A

SuperDAT files

ExtraDAT files

Product deployment and update packages

McAfee Agent language packages

21
Q

How does package signing work in ePO?

A

All packages created and distributed by McAfee are signed with a key pair using the DSA signature verification system

22
Q

How are the packages in the Master Repository encrypted?

A

Using 168-bit 3DES encryption. A key is used to encrypt or decrypt sensitive data

23
Q

Can you check in a package to ePO that has not been signed by McAfee?

A

Yes, they will be secured as other packages are, but McAfee ePO signs them when they are checked in. (Only check in packages if you are confident of the content and the validity of the package)

24
Q

What feature protects your network from receiving packages from unsigned or untrusted sources?

A

The McAfee Agent only trusts package files signed by ePO or McAfee

25
Q

What is a difference in the way Product Deployment Packages are handled compared to update packages?

A

Product Deployment Packages must be manually checked into the Master Repository, while DAT and Engine update packages can be copied from the source site automatically with a pull task

Also, Product Deployment Packages are deployed via a deployment task, while update packages are deployed via a product update task

26
Q

How does the preconfigured “Deployment Tags” group work?

A

When a FIXED product deployment project is created, a tag is created in this group named after the aforementioned product deployment project. This tag is read only, and can’t be manually applied, changed, deleted, or used in criteria configuration to filter systems

27
Q

Considerations when creating update client tasks

A
  • Create a daily update client task at the highest level of the ST, so that all systems inherit the task. (if org is large, use randomization intervals to mitigate bandwidth impact. For networks with offices in different time zones, balance network load by running the task at the local system time of the managed system, rather than at the same time for all systems
  • If you are using scheduled replication tasks, schedule the task at least an hour after the scheduled replication task
  • Run update tasks for DAT and Engine files at least once a day. Managed systems might be logged off from the network and miss the scheduled task. Running the task frequently ensures that these systems receive the update
  • Maximize bandwidth efficiency and create several schedule client update tasks that update separate components and run at different times. For example, you can create one task to update only DAT files, then create another to update both DAT and Engine files weekly or monthly (engine packages are released less frequently)
  • Create and schedule more tasks to update products that do not use the McAfee Agent for Windows
  • Create a task to update your main workstation applications, to ensure that they all receive the update files. Schedule it to run daily or several times a day
28
Q

How can you quickly determine the difference between two client tasks?

A

Client Task Comparison feature

29
Q

What are the important/notable default server tasks?

A
  • Disaster Recovery Snapshot Server Task: Facilitates the back up process of your ePO server configuration
  • Purge Events: Facilitates the periodic removal of outdated events from the databases, preventing performance degradation that would result from high numbers of events.
  • Update Master Repository: Facilitates the automation of the “repository pull” task, pulling down content from the McAfee HTTP site to the master repository so that it can be distributed to the rest of your environment
  • Download Software Product List: Automates the downloading of the software product list that determines which software appears in the software catalog