Palo Alto Networks PSE-Endpoint-Associate Exam Questions Instant Access

Question 1

What is the maximum supported number of endpoints per ESM Server in a Traps 3.4 deployment?

A350

B16,000

C10,000

D80,000

Answer : D

Question 2

What can be used to change the uninstall passwords of agents after the initial installation of the ESM Server and the endpoint agent software?

AUsing the Advanced tab of the Traps endpoint agent console

BUsing an agent action in ESM Console

CUsing an ESM Server setting in ESM Console

DUsing the command 'dbconfig server uninstallpassword' on ESM Server

Answer : C

Question 3

Traps endpoints send which three items directly to the ESM Server over port 2125 by default? (Choose three.)

ARequests for software update packages

BVerdict requests

CWildFire malware reports

DExploit prevention dumps

EPrevention events

FHeartbeats

Answer : A, C, E

Question 4

Which statement about Malware verdicts is true?

AIf WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis.

BIf the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign.

CThe end user can use the Traps console to override a verdict of Malicious.

DLocal analysis verdicts take precedence over WildFire verdicts.

Answer : A

Question 5

In which two ways does Traps complement Palo Alto Networks perimeter protection? (Choose two.)

AEndpoints are sometimes operated by their users outside the corporate network perimeter.

BESM servers send information about threats directly to Palo Alto Networks firewalls.

CTraps endpoints send information about threats directly to Palo Alto Networks firewalls.

DInformation about threats from both Palo Alto Networks firewalls and Traps endpoints flows into a shared threat intelligence cloud.

Answer : B, C

Question 6

How does an administrator make a Tech Support File?

AClick the 'Create ZIP' button on the Logs page in ESM Console

BClick the 'Generate' button on the Settings page in ESM Console

CUse dbconfig on ESM Server

DUse cytool on the endpoint

Answer : B

Question 7

Which two statements about Local Analysis are true? (Choose two.)

ATraps endpoint agents build a local analysis model based on the executables they detect.

BLocal analysis is called to validate all verdicts on executable files before the files are allowed to run.

CPalo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.

DLocal analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Answer : C, D

Palo Alto Networks PSE Endpoint Associate Accreditation Exam (Traps 4.0) PSE-Endpoint-Associate Exam Questions