Question 1

When planning to test a software exploit using a Metasploit module, what two options should be considered about the victim host to ensure success?

AUSB port version of the victim host

BSpeed and make of the victim's RAM

Csoftware version of the target application

Dplatform, architecture, and patch level of the victim host

Answer : A, C

Question 2

Which two enhanced key usage purposes are necessary when creating an SSL certificate for an ESM server? (Choose two.)

AFile Recovery

BServer Authentication

CClient Authentication

DKey Recovery

Answer : B, C

Question 3

There are two custom policy rules in ESM Console. Policy rule number 1000 turns ROP off for winword.exe. Policy rule number 1001 turns ROP on for winword.exe

What is the ROP module status for winword.exe?

ADue to the collision in the policy rules, ROP is enabled in notification mode.

BThe lower numbered policy rule takes precedence. ROP is off for winword.exe

CThe higher numbered policy rule takes precedence. ROP is on for winword.exe

DThe default policy rule takes precedence over both policy rules 1000 and 1001 and disables ROP for winword.exe

Answer : B

Question 4

Which set of modules must be loaded and configured when using Metasploit?

AAttacker, payload

BExploit, payload

CExploit, malware

DMalware, host

Answer : C

Question 5

An administrator can check which two indicators to verity that Traps for Mac is running correctly on an installed endpoint? (Choose two.)

AUse cytool from the command line interface to display the running Traps agent services.

BIn the Activity Monitor, verify that CyveraSecvice is running

CPing other Traps agents from the macOS agent

DVerity that the Traps agent icon is displayed on the macOS finder bar.

Answer : B, D

Free Practice Questions for Palo Alto Networks PSE-Endpoint Exam

Question 1

Question 2

Question 3

Question 4

Question 5