Get DumpsBase PSE Endpoint Associate dumps questions to prepare for your PSE: Endpoint Associate training for Traps 4.0 Exam. New PSE Endpoint Associate dumps questions are written by the professional team, who have good experience in real PSE Endpoint Associate Exam. We have collected 24 practice exam questions and answers to make sure you can prepare for PSE Endpoint Associate Exam well. More, at DumpsBase, you can get Palo Alto Networks PSE Endpoint Associate pdf file and free software for learning.

Check Palo Alto Networks PSE Endpoint Associate Free Dumps Online

1. What does ROP stand for?

Return-Oriented Programming

Rules of Prevention

Restriction on Process

Retained Original Process

2. The Traps product and documentation use the terms "malware" and "exploit" in a very specific way.

Which two statements are true? (Choose two.)

Exploits attempt to take advantage of a vulnerability in code.

The primary vector for exploits is .exe files.

Malware consists of application data files containing malicious code.

Malware consists of malicious executable files that do not rely on exploit techniques.

3. Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

Application data files that trigger preventions

Executables with no previous verdict in the ESM deployment

Executables with a verdict overridden by the administrator

Executables allowed to run because their publisher is trusted

Executables allowed to run by local analysis

Application data files opened by the end user

4. Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.)

A common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.

A common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly.

ESM Server services will shut down if they are not licensed within 24 hours of being started.

Use MSIEXEC with appropriate flags to get more logging detail at installation time.

5. Which statement about Malware verdicts is true?

If WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis.

If the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign.

The end user can use the Traps console to override a verdict of Malicious.

Local analysis verdicts take precedence over WildFire verdicts.

 Loading...