https://www.lead1pass.com/Palo-Alto-Networks/PSE-Endpoint-practice-exam-dumps.html (45 Q&As Dumps, 30%OFF Special Discount: 30free )

NEW QUESTION NO: 1
Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)
A. Executables with a verdict overridden by the administrator
B. Application data files opened by the end user
C. Application data files that trigger preventions
D. Executables with no previous verdict in the ESM deployment
E. Executables allowed to run because their publisher is trusted
F. Executables allowed to run by local analysis
Answer: B,C,F

NEW QUESTION NO: 2
What is the maximum supported number of endpoints per ESM Server in a Traps 3.4 deployment?
A. 80,000
B. 350
C. 16,000
D. 10,000
Answer: A

NEW QUESTION NO: 3
In which two ways does Traps complement Palo Alto Networks perimeter protection?
(Choose two.)
A. Information about threats from both Palo Alto Networks firewalls and Traps endpoints flows into a shared threat intelligence cloud.
B. Endpoints are sometimes operated by their users outside the corporate network perimeter.
C. ESM servers send information about threats directly to Palo Alto Networks firewalls.
D. Traps endpoints send information about threats directly to Palo Alto Networks firewalls.
Answer: C,D

NEW QUESTION NO: 4
Which three statements about the trusted publisher mechanism are true? (Choose three.)
A. The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.
B. The list of trusted publishers is maintained through content updates.
C. No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.
D. The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.
E. The trusted-publisher mechanism takes precedence over verdict overrides by administrators.
F. The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.
Answer: B,D,E

NEW QUESTION NO: 5
Which two statements about file hashes are true? (Choose two.)
A. The Traps agent caches the hashes of executable files for which it has verdicts.
B. ESM Servers send hashes of executable files to WildFire.
C. ESM Servers send hashes of application data files to WildFire.
D. WildFire populates ESM Server's cache with hashes of files known from other customers to be malicious.
Answer: C,D

NEW QUESTION NO: 6
Which two statements about Local Analysis are true? (Choose two.)
A. Local analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.
B. Traps endpoint agents build a local analysis model based on the executables they detect.
C. Local analysis is called to validate all verdicts on executable files before the files are allowed to run.
D. Palo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.
Answer: A,D

NEW QUESTION NO: 7
Which two statements about advanced cyberthreats are true? (Choose two.)
A. It is impractical to protect against zero-day attacks.
B. It is very common for attacks to use previously unknown malware.
C. A zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.
D. A zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.
Answer: C,D

NEW QUESTION NO: 8
A user receives an email with an attached data file containing an exploit. What is it's likely effect? (Choose two.)
A. The exploit can work only if a corresponding application is installed on the user's system.
B. The exploit might be launched merely by previewing the attachment.
C. The exploit can do damage only if it downloads a piece of malware.
D. The exploit can work only if it begins with a buffer overflow.
Answer: A,C

NEW QUESTION NO: 9
The Traps product and documentation use the terms "malware" and "exploit" in a very specific way. Which two statements are true? (Choose two.)
A. Exploits attempt to take advantage of a vulnerability in code.
B. Malware consists of application data files containing malicious code.
C. Malware consists of malicious executable files that do not rely on exploit techniques.
D. The primary vector for exploits is .exe files.
Answer: A,B

NEW QUESTION NO: 10
How does an administrator make a Tech Support File?
A. Click the "Generate" button on the Settings page in ESM Console
B. Click the "Create ZIP" button on the Logs page in ESM Console
C. Use cytool on the endpoint
D. Use dbconfig on ESM Server
Answer: A