Palo Alto Networks PSE-ENDPOINT dumps - 100% Pass Guarantee!

An administrator is concerned about rogue installs of Internet Explorer. Which policy can be created to assure that Internet Explorer can only run from the \Program Files \Internet Explorer \directory?

A. An execution path policy to blacklist iexplore.exe, and whitelist entry for %programfiles%\iexplore.exe

B. An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe

C. A whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of %system% \iexplore.exe

D. An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for %programfiles%\Internet Explorer\iexplore.exe

Which is the proper order of tasks that an administrator needs to perform to successfully create and install Traps 4.x for macOS agents?

A. Download ClientUpgradePackage_4.x.x.zip from the support portal. Copy ClientUpgradePackage_4.x.x.zip to target endpoint. Unzip and run traps pkg.

B. Download ClientUpgradePackage.zip from the support portal. Create installation package on ESM using .zip file, download installpackage.zip file. Copy installpackage.zip to target endpoint. Unzip and run traps pkg.

C. Download Traps_macOS_4.x.x.zip from the support portal. Copy Traps_macOS_4.x.x.zip to target endpoint. Unzip and run traps pkg.

D. Download Traps_macOS_4.x.x.zip from the support portal. Create installation package on ESM using .zip file, download installpackage.zip file. Copy installpackage.zip to target endpoint. Unzip and run traps pkg.

An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded. The

administrator wants to evaluate the ability of Traps to protect these systems and the word processing

applications running on them.

How should an administrator perform this evaluation?

A. Run a known 2015 flash exploit on a Windows XP SP3 VM, and run an exploitation tool that acts as a listener. Use the results to demonstrate Traps capabilities.

B. Run word processing exploits in a Windows 7 VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities.

C. Prepare a Windows 7 VM. Gather information about the word processing applications, determine if some of them are vulnerable, and prepare a working exploit for at least one of them. Execute with an exploitation tool.

D. Gather information about the word processing applications and run them on a Windows XP SP3 VM. Determine if any of the applications are vulnerable and run the exploit with an exploitation tool.

From the ESM console, which two ways can an administrator verify that their installed macOS agents are functional? (Choose two.)

A. Click the Settings Tab > Agent > Installation Package to view the agents installed.

B. Click the Dashboard Tab, and refer to the Computer Distribution and Version window

C. Click the Monitor Tab > Agent > Health. Sort by OS and look for the macOS endpoints

D. Click the Monitor Tab > Data Retrieval

An Administrator has identified an EPM-triggered false positive and has used the Create Rule button from within the relevant entry in the Security Events > Preventions > Exploits tab. What is the result of the created rule?

A. The new rule stops all EPM injection into the faulted process.

B. The new rule stops all EPM injection into processes on the machine on which the prevention was triggered.

C. The new rule excludes the endpoint from Traps protection.

D. The new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.