Palo Alto Networks PSE-Endpoint-Associate Exam Practice Test Instant Access

Question 1

What are two ways to prevent exploits? (Choose two.)

AReturn-Oriented Programming

BAddress Space Layout Randomization

CHeap Spray

DAnti-Spyware Location and Removal

ERetained Original Process

FBuffer Overflow

GData Execution Prevention

Answer : A, F

Question 2

How does an administrator make a Tech Support File?

AClick the 'Create ZIP' button on the Logs page in ESM Console

BClick the 'Generate' button on the Settings page in ESM Console

CUse dbconfig on ESM Server

DUse cytool on the endpoint

Answer : B

Question 3

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

AApplication data files that trigger preventions

BExecutables with no previous verdict in the ESM deployment

CExecutables with a verdict overridden by the administrator

DExecutables allowed to run because their publisher is trusted

EExecutables allowed to run by local analysis

FApplication data files opened by the end user

Answer : A, E, F

Question 4

Which two statements about targeted attacks are true? (Choose two.)

AExploits typically target vulnerabilities for which there are no patches.

BTargeted attacks typically employ a combination of software exploits and malware.

CComputer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

DAttackers may gather information about their intended victims using social media.

Answer : A, B

Question 5

Which is the correct set of prerequisite software components for a production deployment of Endpoint Security Manager?

AIIS, .NET, Microsoft SQL Server or SQLite, and an active WildFire subscription

BIIS, .NET, and Microsoft SQLite

CIIS, .NET, and any relational database

DIIS, .NET, Microsoft SQL Server, and an SMTP email server

EIIS, .NET, and Microsoft SQL Server

Answer : E

Question 6

By default, where are log entries for the ESM Server and the ESM Console stored?

AIn XML-formatted text files on the server

BIn flat text files on the server

CIn a connected SIEM system

DIn Panorama

EIn the Windows event log on the server

Answer : A

Question 7

Which three statements about the trusted publisher mechanism are true? (Choose three.)

AThe trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

BThe list of trusted publishers is maintained through content updates.

CThe trusted-publisher mechanism takes precedence over verdict overrides by administrators.

DThe trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

EThe trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.

FNo executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.

Answer : B, C, D

Palo Alto Networks PSE Endpoint Associate Accreditation Exam (Traps 4.0) PSE-Endpoint-Associate Exam Practice Test