Palo Alto Networks Exam PSE-Endpoint Topic 2 Question 52 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 52
Topic #: 2

In a scenario that macOS Traps logs failed to be uploaded to the forensic folder, where will the user on the macOS host be able to find to collected logs?

A/ProgramData/Cyvera/Logs

B/ProgramData/Cyvera/Everyone/Temp

C/Library/Application Support/Cyvera/BITS Uploads/

D/Library/Application Support/PaloAltoNetworks/Traps/Upload/

Show Suggested Answer

Suggested Answer: D

by Cecily at Oct 23, 2023, 01:53 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leota

8 months ago

You know, I was actually leaning towards B at first. The 'Everyone/Temp' directory sounds like it could be a place where the logs might end up if the upload failed. But I can see the logic behind options C and D as well.

upvoted 0 times

...

France

8 months ago

Hmm, I'm not so sure about that. I feel like option C might also be a possibility. The 'BITS Uploads' directory sounds like it could be where the logs are stored locally before being sent.

upvoted 0 times

...

Novella

8 months ago

Yeah, I agree that D seems like the most likely answer. The question specifically says the logs 'failed to be uploaded', so they should still be in the local directory waiting to be sent.

upvoted 0 times

...

Aleta

8 months ago

This is a tricky question. I'm not entirely sure about the correct answer, but I think it might be option D. The question mentions that the logs weren't uploaded, so they should be in the local upload directory on the macOS host.

upvoted 0 times

...