Online Access Free PSE-Endpoint-Associate Practice Test

What does ROP stand for?

• A.Restriction on Process
• B.Return-Oriented Programming
• C.Retained Original Process
• D.Rules of Prevention

What can a Traps content update include? (Choose three.)

• A.New trusted publishers
• B.New default policy rules
• C.Updates to the local-analysis model
• D.New EPMs
• E.New Traps endpoint drivers
• F.New trusted root certificates

Which three statements about the trusted publisher mechanism are true? (Choose three.)

• A.The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.
• B.The trusted-publisher mechanism takes precedence over verdict overrides by administrators.
• C.No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.
• D.The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.
• E.The list of trusted publishers is maintained through content updates.
• F.The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Which two statements about troubleshooting installation and upgrade problems are true?
(Choose two.)

• A.A common cause of Traps endpoint agent installation problems is the failure to configure the SSL option correctly.
• B.Use MSIEXEC with appropriate flags to get more logging detail at installation time.
• C.A common cause of ESM Server installation problems is the failure to confirm connectivity to WildFire before running the installer.
• D.ESM Server services will shut down if they are not licensed within 24 hours of being started.