PSE-Endpoint 試験問題を無料オンラインアクセス

Which MSI command line parameters will successfully install a Traps agent using SSL and pointed to server ESM?

• A.msiexec /i c:\traps.msi /qn TRAPS_SERVER=ESM USE_SSL_PRIMARY=1
• B.msiexec /x c:\traps.msi /qn SERVER=ESM USE_SSL_PRIMARY=1
• C.msiexec /i c:\traps.msi /qn CYVERA_SERVER=ESM USE_SSL_PRIMARY=1
• D.msiexec /i c:\traps.msi /qn ESM_SERVER=ESM USE_SSL_PRIMARY=1

A company discovers through the agent health display in ESM Console that a certain Traps agent is not communicating with ESM Server. Administrators suspect that the problem relates to TLS/SSL.
Which troubleshooting step determines if this is an SSL issue?

• A.Check that the Traps service is running
• B.Browse to the ESM hostname from the affected agent
• C.From the agent run the command: telnet (hostname) (port)
• D.From the agent run the command: ping (hostname)

An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded. The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them.
How should an administrator perform this evaluation?

• A.Gather information about the word processing applications and run them on a Windows XP SP3 VM. Determine if any of the applications are vulnerable and run the exploit with an exploitation tool.
• B.Prepare a Windows 7 VM. Gather information about the word processing applications, determine if some of them are vulnerable, and prepare a working exploit for at least one of them. Execute with an exploitation tool.
• C.Run word processing exploits in a Windows 7 VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities.
• D.Run a known 2015 flash exploit on a Windows XP SP3 VM, and run an exploitation tool that acts as a listener. Use the results to demonstrate Traps capabilities.

Which set of modules must be loaded and configured when using Metasploit?

• A.Exploit, malware
• B.Malware, host
• C.Attacker, payload
• D.Exploit, payload

A deployment contains some machines that are not part of the domain. The Accounting and Sales departments are two of these.
How can a policy of WildFire notification be applied to Accounting, and a policy of WildFire prevention be applied to Sales, while not affecting any other WildFire policies?

• A.Create a condition for an application found on an Accounting machine. Use that condition for the Accounting groups rule, and create the rule tor Sales without any conditions.
• B.Create two rules for WildFire: one for prevention, and one for notification. Make sure the Accounting rule is numbered higher.
• C.Create group-specific registry entries on endpoints. Use these registry entries to create conditions for the WildFire rules
• D.Create the rules and use the Objects tab to add Accounting and Sales to each rule they should apply to.