Palo Alto Networks PSE-Endpoint-Associate Quiz 4 Topic 1 Questions 16-20

Question: 1

By default, where are log entries for the ESM Server and the ESM Console stored?

AIn XML-formatted text files on the server

BIn flat text files on the server

CIn a connected SIEM system

DIn Panorama

EIn the Windows event log on the server

Show Answer

Question: 2

The administrator uses Restrictions to do what in the ESM Console?

Arestrict which processes will be protected by which EPMs.

Brestrict the execution of executable files.

Crestrict which administrators can set policies.

Drestrict the information displayed to users when the Traps agent blocks an exploit.

Show Answer

Question: 3

Which two statements about advanced cyberthreats are true? (Choose two.)

AIt is very common for attacks to use previously unknown malware.

BA zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.

CIt is impractical to protect against zero-day attacks.

DA zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.

Show Answer

Question: 4

What is the maximum supported number of endpoints per ESM Server in a Traps 3.4 deployment?

A350

B16,000

C10,000

D80,000

Show Answer

Question: 5

Traps endpoints send which three items directly to the ESM Server over port 2125 by default? (Choose three.)

ARequests for software update packages

BVerdict requests

CWildFire malware reports

DExploit prevention dumps

EPrevention events

FHeartbeats

Show Answer

Palo Alto Networks PSE-Endpoint-Associate Quiz:4 Topic:1 Questions:16-20