Palo Alto Networks PSE-Endpoint-Associate Exam Practice Test Instant Access

Question 1

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

AApplication data files that trigger preventions

BExecutables with no previous verdict in the ESM deployment

CExecutables with a verdict overridden by the administrator

DExecutables allowed to run because their publisher is trusted

EExecutables allowed to run by local analysis

FApplication data files opened by the end user

Answer : A, E, F

Question 2

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Answer : A

Question 3

Which two statements about targeted attacks are true? (Choose two.)

AExploits typically target vulnerabilities for which there are no patches.

BTargeted attacks typically employ a combination of software exploits and malware.

CComputer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

DAttackers may gather information about their intended victims using social media.

Answer : A, B

Question 4

The administrator uses Restrictions to do what in the ESM Console?

Arestrict which processes will be protected by which EPMs.

Brestrict the execution of executable files.

Crestrict which administrators can set policies.

Drestrict the information displayed to users when the Traps agent blocks an exploit.

Answer : A

Question 5

By default, where are log entries for the ESM Server and the ESM Console stored?

AIn XML-formatted text files on the server

BIn flat text files on the server

CIn a connected SIEM system

DIn Panorama

EIn the Windows event log on the server

Answer : A

Question 6

What can be used to change the uninstall passwords of agents after the initial installation of the ESM Server and the endpoint agent software?

AUsing the Advanced tab of the Traps endpoint agent console

BUsing an agent action in ESM Console

CUsing an ESM Server setting in ESM Console

DUsing the command 'dbconfig server uninstallpassword' on ESM Server

Answer : C

Question 7

What does ROP stand for?

AReturn-Oriented Programming

BRules of Prevention

CRestriction on Process

DRetained Original Process

Answer : A

Palo Alto Networks PSE-Endpoint-Associate PSE Endpoint Associate Accreditation Exam (Traps 4.0) Exam Practice Test