Palo Alto Networks PSE-Endpoint Quiz 3 Topic 2 Questions 11-15

Question: 1

What is the default interval for Traps agents to communicate via heartbeat to the ESM?

AEvery 1 Minute

BEvery 1 Hour

CEvery 1 Day

DEvery 1 year

Show Answer

Question: 2

In a scenario that macOS Traps logs failed to be uploaded to the forensic folder, where will the user on the macOS host be able to find to collected logs?

A/ProgramData/Cyvera/Logs

B/ProgramData/Cyvera/Everyone/Temp

C/Library/Application Support/Cyvera/BITS Uploads/

D/Library/Application Support/PaloAltoNetworks/Traps/Upload/

Show Answer

Question: 3

An Administrator has identified an EPM-triggered false positive and has used the Create Rule button from within the relevant entry in the Security Events > Preventions > Exploits tab. What is the result of the created rule?

AThe new rule stops all EPM injection into the faulted process.

BThe new rule stops all EPM injection into processes on the machine on which the prevention was triggered.

CThe new rule excludes the endpoint from Traps protection.

DThe new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.

Show Answer

Question: 4

Traps agents use a default password for uninstallation in the event that they never communicate with their ESM server. Identify the password.

APaloAlto!

BUninstall1

CNo password is required

DPassword1

Show Answer

Question: 5

An ESM serverâ€™s SSL certificate needs two Enhanced Key Usage purposes:

Client Authentication and ________________

AServer Authentication

BFile Recovery

CIP Security User

DIP Security Tunnel Termination

Show Answer

Palo Alto Networks PSE-Endpoint Quiz:3 Topic:2 Questions:11-15