Limited-Time Offer: Enjoy 50% Savings! Ends in 00h 00m 00s Coupon code: 50OFF
Skip to content
Login Sign up

Free Palo Alto Networks PSE Endpoint Professional Exam PSE-Endpoint Exam Questions

Page: 1 / 8 Total 45 questions

Want more questions? Get Premium Access.

Question 1

An administrator is testing an exploit that is expected to be blocked by the JIT Mitigation EPM protecting the viewer application in use. No prevention occurs, and the attack is successful.

In which two ways can the administrator determine the reason for the missed prevention? (Choose two.)

Correct Answer: A. Check in the HKLM\SYSTEM\Cyvera\Policy registry key and subkeys whether JIT Mitigation is enabled for this application; C. Check that the Traps libraries are injected into the application

Question 2

An administrator would like to add Google Chrome and Google Chrome Helper to the exploit prevention policy for macOS. In order to achieve this task, which option should be added to the macOS protected processes list?

Correct Answer: B. google chrome and google chrome helper

Question 3

Which is the proper order of tasks that an administrator needs to perform to successfully create and install Traps 4.x for macOS agents?

Correct Answer: D. Download Traps_macOS_4.x.x.zip from the support portal. Create installation package on ESM using .zip file, download installpackage.zip file. Copy installpackage.zip to target endpoint. Unzip and run traps pkg.

Question 4

An administrator can check which two indicators to verity that Traps for Mac is running correctly on an installed endpoint? (Choose two.)

Correct Answer: B. In the Activity Monitor, verify that CyveraSecvice is running; D. Verity that the Traps agent icon is displayed on the macOS finder bar.

Question 5

Which two enhanced key usage purposes are necessary when creating an SSL certificate for an ESM server? (Choose two.)

Correct Answer: B. Server Authentication; C. Client Authentication

Question 6

A retail company just purchased Traps for its 8,000 endpoints. Many of its users work remotely. The company is not using any VPN solution, but would still like to manage all endpoints regardless where they are.

Which two aspects should be part of the recommendation? (Choose two.)

Correct Answer: A. As each ESM Core server can handle up to 30,000 endpoints, use at least 1 ESM Core server internally and 1 ESM core server in the DMZ for external endpoints.; B. Placing an ESM Core server in the DMZ or in a cloud hosting service allows external endpoints to connect to it, even without a VPN client.
Page: 1 / 8 Total 45 questions