Palo Alto Networks PSE-Endpoint-Associate Exam Practice Test Instant Access

Question 1

Which two statements about targeted attacks are true? (Choose two.)

AExploits typically target vulnerabilities for which there are no patches.

BTargeted attacks typically employ a combination of software exploits and malware.

CComputer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

DAttackers may gather information about their intended victims using social media.

Answer : A, B

Question 2

Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.)

AA common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.

BA common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly.

CESM Server services will shut down if they are not licensed within 24 hours of being started.

DUse MSIEXEC with appropriate flags to get more logging detail at installation time.

Answer : A, B

Question 3

Which two statements about advanced cyberthreats are true? (Choose two.)

AIt is very common for attacks to use previously unknown malware.

BA zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.

CIt is impractical to protect against zero-day attacks.

DA zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.

Answer : B, D

Question 4

Which two statements about Local Analysis are true? (Choose two.)

ATraps endpoint agents build a local analysis model based on the executables they detect.

BLocal analysis is called to validate all verdicts on executable files before the files are allowed to run.

CPalo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.

DLocal analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Answer : C, D

Question 5

What is the maximum supported number of endpoints per ESM Server in a Traps 3.4 deployment?

A350

B16,000

C10,000

D80,000

Answer : D

Question 6

A user receives an email with an attached data file containing an exploit. What is it's likely effect? (Choose two.)

AThe exploit can work only if a corresponding application is installed on the user's system.

BThe exploit can do damage only if it downloads a piece of malware.

CThe exploit can work only if it begins with a buffer overflow.

DThe exploit might be launched merely by previewing the attachment.

Answer : A, B

Question 7

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Answer : A

Palo Alto Networks PSE-Endpoint-Associate PSE Endpoint Associate Accreditation Exam (Traps 4.0) Exam Practice Test