Free Palo Alto Networks PSE-Endpoint-Associate Exam Dumps and PSE-Endpoint-Associate Exam Questions

Question No: 11

MultipleChoice

Which two statements about file hashes are true? (Choose two.)

Options

AWildFire populates ESM Server's cache with hashes of files known from other customers to be malicious.

BThe Traps agent caches the hashes of executable files for which it has verdicts.

CESM Servers send hashes of application data files to WildFire.

DESM Servers send hashes of executable files to WildFire.

Question No: 12

MultipleChoice

In the Traps product, what does the term “Service Protection” mean?

Options

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Question No: 13

MultipleChoice

In which two ways does Traps complement Palo Alto Networks perimeter protection? (Choose two.)

Options

AEndpoints are sometimes operated by their users outside the corporate network perimeter.

BESM servers send information about threats directly to Palo Alto Networks firewalls.

CTraps endpoints send information about threats directly to Palo Alto Networks firewalls.

DInformation about threats from both Palo Alto Networks firewalls and Traps endpoints flows into a shared threat intelligence cloud.

Question No: 14

MultipleChoice

Which statement about Malware verdicts is true?

Options

AIf WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis.

BIf the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign.

CThe end user can use the Traps console to override a verdict of Malicious.

DLocal analysis verdicts take precedence over WildFire verdicts.

Question No: 15

MultipleChoice

How does an administrator make a Tech Support File?

Options

AClick the 'Create ZIP' button on the Logs page in ESM Console

BClick the 'Generate' button on the Settings page in ESM Console

CUse dbconfig on ESM Server

DUse cytool on the endpoint

Question No: 16

MultipleChoice

What can be used to change the uninstall passwords of agents after the initial installation of the ESM Server and the endpoint agent software?

Options

AUsing the Advanced tab of the Traps endpoint agent console

BUsing an agent action in ESM Console

CUsing an ESM Server setting in ESM Console

DUsing the command 'dbconfig server uninstallpassword' on ESM Server

Question No: 17

MultipleChoice

Which two statements about targeted attacks are true? (Choose two.)

Options

AExploits typically target vulnerabilities for which there are no patches.

BTargeted attacks typically employ a combination of software exploits and malware.

CComputer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

DAttackers may gather information about their intended victims using social media.

Question No: 18

MultipleChoice

What are two ways to prevent exploits? (Choose two.)

Options

AReturn-Oriented Programming

BAddress Space Layout Randomization

CHeap Spray

DAnti-Spyware Location and Removal

ERetained Original Process

FBuffer Overflow

GData Execution Prevention

Question No: 19

MultipleChoice

Which is the correct set of prerequisite software components for a production deployment of Endpoint Security Manager?

Options

AIIS, .NET, Microsoft SQL Server or SQLite, and an active WildFire subscription

BIIS, .NET, and Microsoft SQLite

CIIS, .NET, and any relational database

DIIS, .NET, Microsoft SQL Server, and an SMTP email server

EIIS, .NET, and Microsoft SQL Server

Question No: 20

MultipleChoice

Which three statements about the trusted publisher mechanism are true? (Choose three.)

Options

AThe trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

BThe list of trusted publishers is maintained through content updates.

CThe trusted-publisher mechanism takes precedence over verdict overrides by administrators.

DThe trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

EThe trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.

FNo executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.