Palo Alto Networks PSE-Endpoint-Associate Exam Questions Instant Access

Question 1

A user receives an email with an attached data file containing an exploit. What is it's likely effect? (Choose two.)

AThe exploit can work only if a corresponding application is installed on the user's system.

BThe exploit can do damage only if it downloads a piece of malware.

CThe exploit can work only if it begins with a buffer overflow.

DThe exploit might be launched merely by previewing the attachment.

Answer : A, B

Question 2

What can a Traps content update include? (Choose three.)

ANew EPMs

BUpdates to the local-analysis model

CNew trusted root certificates

DNew default policy rules

ENew trusted publishers

FNew Traps endpoint drivers

Answer : B, C, D

Question 3

By default, where are log entries for the ESM Server and the ESM Console stored?

AIn XML-formatted text files on the server

BIn flat text files on the server

CIn a connected SIEM system

DIn Panorama

EIn the Windows event log on the server

Answer : A

Question 4

Which two statements about Local Analysis are true? (Choose two.)

ATraps endpoint agents build a local analysis model based on the executables they detect.

BLocal analysis is called to validate all verdicts on executable files before the files are allowed to run.

CPalo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.

DLocal analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Answer : C, D

Question 5

How does an administrator make a Tech Support File?

AClick the 'Create ZIP' button on the Logs page in ESM Console

BClick the 'Generate' button on the Settings page in ESM Console

CUse dbconfig on ESM Server

DUse cytool on the endpoint

Answer : B

Question 6

Which is the correct set of prerequisite software components for a production deployment of Endpoint Security Manager?

AIIS, .NET, Microsoft SQL Server or SQLite, and an active WildFire subscription

BIIS, .NET, and Microsoft SQLite

CIIS, .NET, and any relational database

DIIS, .NET, Microsoft SQL Server, and an SMTP email server

EIIS, .NET, and Microsoft SQL Server

Answer : E

Question 7

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Answer : A

Palo Alto Networks PSE Endpoint Associate Accreditation Exam (Traps 4.0) PSE-Endpoint-Associate Exam Questions