Palo Alto Networks PSE-Endpoint-Associate Quiz 1 Topic 1 Questions 1-5

Question: 1

What are two ways to prevent exploits? (Choose two.)

AReturn-Oriented Programming

BAddress Space Layout Randomization

CHeap Spray

DAnti-Spyware Location and Removal

ERetained Original Process

FBuffer Overflow

GData Execution Prevention

Show Answer

Question: 2

Which is the correct set of prerequisite software components for a production deployment of Endpoint Security Manager?

AIIS, .NET, Microsoft SQL Server or SQLite, and an active WildFire subscription

BIIS, .NET, and Microsoft SQLite

CIIS, .NET, and any relational database

DIIS, .NET, Microsoft SQL Server, and an SMTP email server

EIIS, .NET, and Microsoft SQL Server

Show Answer

Question: 3

Which three statements about the trusted publisher mechanism are true? (Choose three.)

AThe trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

BThe list of trusted publishers is maintained through content updates.

CThe trusted-publisher mechanism takes precedence over verdict overrides by administrators.

DThe trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

EThe trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.

FNo executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.

Show Answer

Question: 4

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

AApplication data files that trigger preventions

BExecutables with no previous verdict in the ESM deployment

CExecutables with a verdict overridden by the administrator

DExecutables allowed to run because their publisher is trusted

EExecutables allowed to run by local analysis

FApplication data files opened by the end user

Show Answer

Question: 5

Which two statements about troubleshooting installation and upgrade problems are true? (Choose two.)

AA common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.

BA common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly.

CESM Server services will shut down if they are not licensed within 24 hours of being started.

DUse MSIEXEC with appropriate flags to get more logging detail at installation time.

Show Answer

Palo Alto Networks PSE-Endpoint-Associate Quiz:1 Topic:1 Questions:1-5