PSE Endpoint - Professional - PSE-Endpoint Exam Practice Test

Question 1

A customer has an environment with the following:
* 1,000 agents communicating over SSL with two servers - one containing the ESM Server and another one where the ESM Console is installed
* BitsUploads resides on the ESM Console server
* ESM Server and Console are using the default pods tor communication
In a scenario where a file is failing to be uploaded from macOS, which three reasons could be directly related to the failure? (Choose three.)

A. The BITS address in the ESM is incorrect

B. Port 443 is blocked on the server which hosts BitsUploads

C. The rate of upload is lower than 100Kb/S

D. Port 2125 is blocked on the server which hosts BitsUploads

E. Traps agent is not able to check in with the ESM Server

Correct Answer: A,B,E

Question 2

Traps agents use a default password for uninstallation in the event that they never communicate with their ESM server. Identify the password.

A. No password is required

B. PaloAlto!

C. Uninstall1

D. Password1

Correct Answer: D

Question 3

Which software category is most likely to cause a conflict with the Traps agent?

A. Full disk encryption software

B. Web browser software

C. Exploit prevention software

D. Web meeting and collaboration software

Correct Answer: C

Question 4

An administrator has decided to test Traps functionality using malware samples in an isolated non-production environment. In order to effectively test Traps, what three types of samples should the administrator avoid? (Choose three.)

A. A freeware video application which spawns malicious processes

B. A sample known to be flagged as grayware by Traps

C. A sample known to generate false positives in the production environment.

D. A sample with a low number of hits in Virus Total

E. An MS Office document which contains a ransomware macro

Correct Answer: C,D,E

Question 5

An administrator is concerned about rogue installs of Internet Explorer.
Which policy can be created to assure that Internet Explorer can only run from the
\Program Files \Internet Explorer \directory?

A. A whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of
% system%\iexplore.exe

B. An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for
% programfiles%\Internet Explorer\iexplore.exe

C. An execution path policy to blacklist iexplore.exe, and whitelist entry for
% programfiles%\iexplore.exe

D. An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe

Correct Answer: B

Palo Alto Networks PSE Endpoint - Professional - PSE-Endpoint Exam Practice Test

Latest Update

Useful Links

Contact Us