PSE-Endpoint-Associate 무료 덤프문제 온라인 액세스

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

• A.Application data files opened by the end user
• B.Application data files that trigger preventions
• C.Executables with a verdict overridden by the administrator
• D.Executables with no previous verdict in the ESM deployment
• E.Executables allowed to run by local analysis
• F.Executables allowed to run because their publisher is trusted

What are two ways to prevent exploits? (Choose two.)

• A.Anti-Spyware Location and Removal
• B.Buffer Overflow
• C.Data Execution Prevention
• D.Address Space Layout Randomization
• E.Heap Spray
• F.Retained Original Process
• G.Return-Oriented Programming

Which three statements about the trusted publisher mechanism are true? (Choose three.)

• A.The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.
• B.The list of trusted publishers is maintained through content updates.
• C.The trusted-publisher mechanism takes precedence over verdict overrides by administrators.
• D.No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.
• E.The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.
• F.The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.

Which statement about Malware verdicts is true?

• A.If WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict from local analysis.
• B.The end user can use the Traps console to override a verdict of Malicious.
• C.If the ESM server is not available when the Traps agent tries to reach it for a verdict on a file, the file status is marked as Benign.
• D.Local analysis verdicts take precedence over WildFire verdicts.