Online Access Free PSE-Endpoint-Associate Exam Questions

Which two statements about Local Analysis are true? (Choose two.)

• A.Local analysis is called to validate all verdicts on executable files before the files are allowed to run.
• B.Traps endpoint agents build a local analysis model based on the executables they detect.
• C.Palo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.
• D.Local analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

By default, where are log entries for the ESM Server and the ESM Console stored?

• A.In XML-formatted text files on the server
• B.In Panorama
• C.In a connected SIEM system
• D.In the Windows event log on the server
• E.In flat text files on the server

Which three statements about the trusted publisher mechanism are true? (Choose three.)

• A.The list of trusted publishers is maintained through content updates.
• B.The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.
• C.The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.
• D.No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.
• E.The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.
• F.The trusted-publisher mechanism takes precedence over verdict overrides by administrators.

Which two statements about advanced cyberthreats are true? (Choose two.)

• A.It is very common for attacks to use previously unknown malware.
• B.A zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.
• C.A zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.
• D.It is impractical to protect against zero-day attacks.