McAfee-Certified Product Specialist - HIPs

Vulnerability ✘ Time to patch ✘ Protection ✘ Threat remediation ✔

Common Framework ✘ System 32 ✘ My Documents ✘ Windows Temp ✔

FireTray.log ✘ FireSvc.log ✘ HipMgtPlugin.log ✘ McTrayHip.log ✔

Schedule Server Tasks Enforce Policies Collect and Send System Properties Scan for Threats and Vulnerabilities Policy Throttling

These ports are commonly subjected to malicious exploitation ✘ The default values are in the common domain ✘ The default ports may already be in use inside of the network ✘ To avoid technical issues with port allocation ✔

tfwPassthru ✘ /fwinfo ✘ /execinfo ✘ /defConfig ✔

FireSvc.exe ✘ FireTray.exe ✘ FrameworkService.exe ✘ Mfevlps.exe ✔

Applications, system registry and services are locked down against malicious activity ✘ Applications are not permitted to access data, registry and services outside of their application envelope ✘ Applications are prevented from communicating with any undefined network services ✘ Applications can only hook into processes that match a specific digital signature ✔

Exception creation Health checking Reporting Alerting Updating

Task Manager ✘ McShield ✘ Framework Service ✘ Scan32.exe ✔