Palo Alto Networks PSE-Endpoint-Associate Exam Practice Test Instant Access

Question 1

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Answer : A

Question 2

A user receives an email that has piece of malware as an attachment. Choose the true statement.

AThe piece of malware can work only if a corresponding application is on the user's system.

BThe piece of malware can do damage only if it makes a connection to a command-and-control server.

CThe piece of malware can work only if it begins with a buffer overflow.

DThe piece of malware can work only if the user opens the attachment.

Answer : C

Question 3

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

AApplication data files that trigger preventions

BExecutables with no previous verdict in the ESM deployment

CExecutables with a verdict overridden by the administrator

DExecutables allowed to run because their publisher is trusted

EExecutables allowed to run by local analysis

FApplication data files opened by the end user

Answer : A, E, F

Question 4

What can a Traps content update include? (Choose three.)

ANew EPMs

BUpdates to the local-analysis model

CNew trusted root certificates

DNew default policy rules

ENew trusted publishers

FNew Traps endpoint drivers

Answer : B, C, D

Question 5

Which two statements about Local Analysis are true? (Choose two.)

ATraps endpoint agents build a local analysis model based on the executables they detect.

BLocal analysis is called to validate all verdicts on executable files before the files are allowed to run.

CPalo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.

DLocal analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Answer : C, D

Question 6

Which two statements about file hashes are true? (Choose two.)

AWildFire populates ESM Server's cache with hashes of files known from other customers to be malicious.

BThe Traps agent caches the hashes of executable files for which it has verdicts.

CESM Servers send hashes of application data files to WildFire.

DESM Servers send hashes of executable files to WildFire.

Answer : A, C

Question 7

Which is the correct set of prerequisite software components for a production deployment of Endpoint Security Manager?

AIIS, .NET, Microsoft SQL Server or SQLite, and an active WildFire subscription

BIIS, .NET, and Microsoft SQLite

CIIS, .NET, and any relational database

DIIS, .NET, Microsoft SQL Server, and an SMTP email server

EIIS, .NET, and Microsoft SQL Server

Answer : E

Palo Alto Networks PSE Endpoint Associate Accreditation Exam (Traps 4.0) Exam Practice Test