Palo Alto Networks PSE-Endpoint Quiz 6 Topic 1 Questions 26-30

Question: 1

A company is trying to understand which platform can be installed on their environment:

Select the three endpoints where Traps can be installed (Choose three).

AWindows 10 LTSB with 2 GB RAM, 500MB free disk space and Intel Core i5 CPU

BWindows 2000 SP4 with 1 GB RAM, 4 GB free disk space and Intel Pentium 4 CPU

CApple iPhone 6s

DWindows Server 2012 R2 Standard Edition in FIPS Mode, with 4GB RAM, 20GB free disk space, running on VMware ESXi.

E15'' MacBook Pro running macOS 10.12 with 16GB RAM, Intel Core i7 CPU and 100GB tree disk space

Show Answer

Question: 2

Uploads to the ESM Sever are failing.

How can the mechanism for forensic and WildFire uploads be tested from the endpoint?

AUse BITS commands in PowerShell to send a file to the ESM Server

BUse curl to execute a POST operation

CUse SCP commands from a ssh client to transfer a file to the ESM Server

DClick Check-in now in the agent console

Show Answer

Question: 3

Which two are valid optional parameters when upgrading Traps agent from the ESM console using Upgrade from path? (Choose two.)

AConditions

BProcesses

CESM Server

DTarget Objects

EFeatures

Show Answer

Question: 4

An administrator is concerned about rogue installs of Internet Explorer.

Which policy can be created to assure that Internet Explorer can only run from the Program Files Internet Explorer directory?

AAn execution path policy to blacklist iexplore.exe, and whitelist entry for %programfiles%\iexplore.exe

BAn execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe

CA whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of %system%\iexplore.exe

DAn execution path policy to blacklist *\iexplore.exe, and a whitelist entry for %programfiles%\Internet Explorer\iexplore.exe

Show Answer

Question: 5

An administrator has decided to test Traps functionality using malware samples in an isolated non-production environment. In order to effectively test Traps, what three types of samples should the administrator avoid? (Choose three.)

AA sample with a low number of hits in Virus Total

BAn MS Office document which contains a ransomware macro

CA sample known to be flagged as grayware by Traps

DA freeware video application which spawns malicious processes

EA sample known to generate false positives in the production environment.

Show Answer

Palo Alto Networks PSE-Endpoint Quiz:6 Topic:1 Questions:26-30