Which two statements about Local Analysis are true? (Choose two.)

ATraps endpoint agents build a local analysis model based on the executables they detect.

BLocal analysis is called to validate all verdicts on executable files before the files are allowed to run.

CPalo Alto Networks uses machine-learning techniques in its labs to build the local analysis model.

DLocal analysis is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

Answer : C, D

What can a Traps content update include? (Choose three.)

ANew EPMs

BUpdates to the local-analysis model

CNew trusted root certificates

DNew default policy rules

ENew trusted publishers

FNew Traps endpoint drivers

Answer : B, C, D

Which three file types will be uploaded automatically to WildFire for examination? (Choose three.)

AApplication data files that trigger preventions

BExecutables with no previous verdict in the ESM deployment

CExecutables with a verdict overridden by the administrator

DExecutables allowed to run because their publisher is trusted

EExecutables allowed to run by local analysis

FApplication data files opened by the end user

Answer : A, E, F

A user receives an email that has piece of malware as an attachment. Choose the true statement.

AThe piece of malware can work only if a corresponding application is on the user's system.

BThe piece of malware can do damage only if it makes a connection to a command-and-control server.

CThe piece of malware can work only if it begins with a buffer overflow.

DThe piece of malware can work only if the user opens the attachment.

Answer : C

In the Traps product, what does the term ''Service Protection'' mean?

Athe protection of a specified process

Bthe ability of one ESM Server to take over for another

Cthe protection of a process running on a Windows Server system

Dthe ability of the Traps agent to make itself tamper-proof

Answer : A

Free Practice Questions for Palo Alto Networks PSE-Endpoint-Associate Exam