Palo Alto Networks PSE-ENDPOINT Exam Questions & Answers

A company is trying to understand which platform can be installed on their environment: Select the three endpoints where Traps can be installed (Choose three).

A. Windows 10 LTSB with 2 GB RAM, 500MB free disk space and Intel Core i5 CPU

B. Windows 2000 SP4 with 1 GB RAM, 4 GB free disk space and Intel Pentium 4 CPU

C. Apple iPhone 6s

D. Windows Server 2012 R2 Standard Edition in FIPS Mode, with 4GB RAM, 20GB free disk space, running on VMware ESXi.

E. 15" MacBook Pro running macOS 10.12 with 16GB RAM, Intel Core i7 CPU and 100GB tree disk space

An Administrator has identified an EPM-triggered false positive and has used the Create Rule button from within the relevant entry in the Security Events > Preventions > Exploits tab. What is the result of the created rule?

A. The new rule stops all EPM injection into the faulted process.

B. The new rule stops all EPM injection into processes on the machine on which the prevention was triggered.

C. The new rule excludes the endpoint from Traps protection.

D. The new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.

An administrator has decided to test Traps functionality using malware samples in an isolated nonproduction environment. In order to effectively test Traps, what three types of samples should the administrator avoid? (Choose three.)

A. A sample with a low number of hits in Virus Total.

B. An MS Office document which contains a ransomware macro.

C. A sample known to be flagged as grayware by Traps.

D. A freeware video application which spawns malicious processes.

E. A sample known to generate false positives in the production environment.