Online Access Free PSE-Endpoint Exam Questions

When planning to test a software exploit using a Metasploit module, what two options should be considered about the victim host to ensure success?

• A.software version of the target application
• B.platform, architecture, and patch level of the victim host
• C.USB port version of the victim host
• D.Speed and make of the victim's RAM

Uploads to the ESM Sever are failing.
How can the mechanism for forensic and WildFire uploads be tested from the endpoint?

• A.Click Check-in now in the agent console
• B.Use BITS commands in PowerShell to send a file to the ESM Server
• C.Use curl to execute a POST operation
• D.Use SCP commands from a ssh client to transfer a file to the ESM Server

There are two custom policy rules in ESM Console. Policy rule number 1000 turns ROP off for winword.exe. Policy rule number 1001 turns ROP on for winword.exe What is the ROP module status for winword.exe?

• A.The default policy rule takes precedence over both policy rules 1000 and 1001 and disables ROP for winword.exe
• B.Due to the collision in the policy rules, ROP is enabled in notification mode.
• C.The lower numbered policy rule takes precedence. ROP is off for winword.exe
• D.The higher numbered policy rule takes precedence. ROP is on for winword.exe

Which two enhanced key usage purposes are necessary when creating an SSL certificate for an ESM server? (Choose two.)

• A.Key Recovery
• B.File Recovery
• C.Server Authentication
• D.Client Authentication

An administrator is concerned about rogue installs of Internet Explorer.
Which policy can be created to assure that Internet Explorer can only run from the
\Program Files \Internet Explorer \directory?

• A.An execution path policy to blacklist iexplore.exe, and whitelist entry for
  % programfiles%\iexplore.exe
• B.A whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of
  % system%\iexplore.exe
• C.An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for
  % programfiles%\Internet Explorer\iexplore.exe
• D.An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe