Palo Alto Networks PSE: Endpoint Associate training for Traps 4.0 - PSE-Endpoint-Associate Exam Practice Test

A. the ability of the Traps agent to make itself tamper-proof

B. the ability of one ESM Server to take over for another

C. the protection of a process running on a Windows Server system

D. the protection of a specified process

A. Executables with no previous verdict in the ESM deployment

B. Application data files that trigger preventions

C. Executables allowed to run because their publisher is trusted

D. Application data files opened by the end user

E. Executables allowed to run by local analysis

F. Executables with a verdict overridden by the administrator

A. The trusted-publisher mechanism takes precedence over verdict overrides by administrators.

B. No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.

C. The list of trusted publishers is maintained through content updates.

D. The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

E. The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

F. The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.