Palo Alto Networks PSE-Endpoint-Associate Exam Practice Test Instant Access

Question 1

What can a Traps content update include? (Choose three.)

ANew EPMs

BUpdates to the local-analysis model

CNew trusted root certificates

DNew default policy rules

ENew trusted publishers

FNew Traps endpoint drivers

Answer : B, C, D

Question 2

Which two statements about targeted attacks are true? (Choose two.)

AExploits typically target vulnerabilities for which there are no patches.

BTargeted attacks typically employ a combination of software exploits and malware.

CComputer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

DAttackers may gather information about their intended victims using social media.

Answer : A, B

Question 3

Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.)

AA common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.

BA common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly.

CESM Server services will shut down if they are not licensed within 24 hours of being started.

DUse MSIEXEC with appropriate flags to get more logging detail at installation time.

Answer : A, B

Question 4

Traps endpoints send which three items directly to the ESM Server over port 2125 by default? (Choose three.)

ARequests for software update packages

BVerdict requests

CWildFire malware reports

DExploit prevention dumps

EPrevention events

FHeartbeats

Answer : A, C, E

Question 5

What is the maximum supported number of endpoints per ESM Server in a Traps 3.4 deployment?

A350

B16,000

C10,000

D80,000

Answer : D

Question 6

Which two statements about advanced cyberthreats are true? (Choose two.)

AIt is very common for attacks to use previously unknown malware.

BA zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.

CIt is impractical to protect against zero-day attacks.

DA zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.

Answer : B, D

Question 7

In which two ways does Traps complement Palo Alto Networks perimeter protection? (Choose two.)

AEndpoints are sometimes operated by their users outside the corporate network perimeter.

BESM servers send information about threats directly to Palo Alto Networks firewalls.

CTraps endpoints send information about threats directly to Palo Alto Networks firewalls.

DInformation about threats from both Palo Alto Networks firewalls and Traps endpoints flows into a shared threat intelligence cloud.

Answer : B, C

Palo Alto Networks PSE Endpoint Associate Accreditation Exam (Traps 4.0) PSE-Endpoint-Associate Exam Practice Test