Name: PSE Endpoint Associate Accreditation Exam (Traps 4.0)
Brand: ValidExamDumps
SKU: PSE-Endpoint-Associate
Price: 20 USD
Availability: InStock
Rating: 5.0 (290 reviews)

Free Palo Alto Networks PSE-Endpoint-Associate Exam Actual Questions

The questions for PSE-Endpoint-Associate were last updated On Dec 16, 2024

Question No. 1

What are two ways to prevent exploits? (Choose two.)

AReturn-Oriented Programming

BAddress Space Layout Randomization

CHeap Spray

DAnti-Spyware Location and Removal

ERetained Original Process

FBuffer Overflow

GData Execution Prevention

Show Answer

Correct Answer: A, F

Question No. 2

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Show Answer

Correct Answer: A

Question No. 3

A user receives an email with an attached data file containing an exploit. What is it's likely effect? (Choose two.)

AThe exploit can work only if a corresponding application is installed on the user's system.

BThe exploit can do damage only if it downloads a piece of malware.

CThe exploit can work only if it begins with a buffer overflow.

DThe exploit might be launched merely by previewing the attachment.

Show Answer

Correct Answer: A, B

Question No. 4

Which three statements about the trusted publisher mechanism are true? (Choose three.)

AThe trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

BThe list of trusted publishers is maintained through content updates.

CThe trusted-publisher mechanism takes precedence over verdict overrides by administrators.

DThe trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

EThe trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.

FNo executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.

Show Answer

Correct Answer: B, C, D

Question No. 5

Which statement about Malware verdicts is true?

AIf WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis.

BIf the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign.

CThe end user can use the Traps console to override a verdict of Malicious.

DLocal analysis verdicts take precedence over WildFire verdicts.

Show Answer

Correct Answer: A