PSE Endpoint Associate Practice Test Questions

1. Palo Alto Networks Palo Alto Networks PSE Endpoint Associate Real PSE Endpoint Associate Real Questions Questions PSE: Endpoint Associate training for Traps 4.0 https://www.passquestion.com/ https://www.passquestion.com/PSE-Endpoint-Associate PSE-Endpoint-Associate.html .html

2. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 1 What does ROP stand for? A. Return-Oriented Programming B. Rules of Prevention C. Restriction on Process D. Retained Original Process Answer: A

3. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 2 The Traps product and documentation use the terms "malware" and "exploit" in a very specific way. Which two statements are true? (Choose two.) A. Exploits attempt to take advantage of a vulnerability in code. B. The primary vector for exploits is .exe files. C. Malware consists of application data files containing malicious code. D. Malware consists of malicious executable files that do not rely on exploit techniques. Answer: A,C

4. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 3 Which three file types will be uploaded automatically to WildFire for examination? (Choose three.) A. Application data files that trigger preventions B. Executables with no previous verdict in the ESM deployment C. Executables with a verdict overridden by the administrator D. Executables allowed to run because their publisher is trusted E. Executables allowed to run by local analysis F. Application data files opened by the end user Answer: A,E,F

5. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 4 Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.) A. A common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer. B. A common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly. C. ESM Server services will shut down if they are not licensed within 24 hours of being started. D. Use MSIEXEC with appropriate flags to get more logging detail at installation time. Answer: A,B

6. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 5 Which statement about Malware verdicts is true? A. If WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis. B. If the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign. C. The end user can use the Traps console to override a verdict of Malicious. D. Local analysis verdicts take precedence over WildFire verdicts. Answer: A

7. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 6 What can be used to change the uninstall passwords of agents after the initial installation of the ESM Server and the endpoint agent software? A. Using the Advanced tab of the Traps endpoint agent console B. Using an agent action in ESM Console C. Using an ESM Server setting in ESM Console D. Using the command "dbconfig server uninstallpassword" on ESM Server Answer: C

8. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 7 In the Traps product, what does the term “Service Protection” mean? A. the protection of a specified process B. the ability of one ESM Server to take over for another C. the protection of a process running on a Windows Server system D. the ability of the Traps agent to make itself tamper-proof Answer: A

9. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 8 A user receives an email that has piece of malware as an attachment. Choose the true statement. A. The piece of malware can work only if a corresponding application is on the user’s system. B. The piece of malware can do damage only if it makes a connection to a command-and C. The piece of malware can work only if it begins with a buffer overflow. D. The piece of malware can work only if the user opens the attachment. Answer: C control server.

10. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 9 Which two statements about targeted attacks are true? (Choose two.) A. Exploits typically target vulnerabilities for which there are no patches. B. Targeted attacks typically employ a combination of software exploits and malware. C. Computer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date. D. Attackers may gather information about their intended victims using social media. Answer: A,B

11. Download PassQuestion Palo Alto Networks PSE Endpoint Associate exam questions to pass your exam successfully Sample Questions 10 Which two statements about Local Analysis are true? (Choose two.) A. Traps endpoint agents build a local analysis model based on the executables they detect. B. Local analysis is called to validate all verdicts on executable files before the files are allowed to run. C. Palo Alto Networks uses machine-learning techniques in its labs to build the local analysis model. D. Local analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict. Answer: C,D