Palo Alto Networks Exam PSE-Endpoint Topic 1 Question 42 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 42
Topic #: 1

An administrator has decided to test Traps functionality using malware samples in an isolated non-production environment. In order to effectively test Traps, what three types of samples should the administrator avoid? (Choose three.)

AA sample with a low number of hits in Virus Total

BAn MS Office document which contains a ransomware macro

CA sample known to be flagged as grayware by Traps

DA freeware video application which spawns malicious processes

EA sample known to generate false positives in the production environment.

Show Suggested Answer

Suggested Answer: B

by Sylvia at Feb 25, 2023, 04:24 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arlene

1 days ago

I agree, we should also avoid samples known to generate false positives.

upvoted 0 times

...

Alaine

6 days ago

I think we should avoid samples with low hits in Virus Total.

upvoted 0 times

...