PSE-Endpoint 試験問題を無料オンラインアクセス

The administrator has added the following whitelist to the WildFire Executable Files policy.
*\mysoftware.exe
What will be the result of this whitelist?

• A.users will not be able to run mysoftware.exe.
• B.mysoftware.exe will be uploaded to WildFire for analysis
• C.mysoftware.exe will not be analyzed by WildFire regardless of the file location.
• D.mysoftware.exe will not be analyzed by WildFire, but only if executed from the C drive.

Uploads to the ESM Sever are failing.
How can the mechanism for forensic and WildFire uploads be tested from the endpoint?

• A.Use SCP commands from a ssh client to transfer a file to the ESM Server
• B.Use curl to execute a POST operation
• C.Click Check-in now in the agent console
• D.Use BITS commands in PowerShell to send a file to the ESM Server

To ensure that the Traps VDI tool can obtain verdicts for all unknown files what are the things that needs to be checked? Assuming ESM Console and ESM Server are on different servers. (Choose two.)

• A.ESM Console can access WildFire Server
• B.ESM Server can access WildFire Server
• C.Endpoint can access ESM Server
• D.Endpoint can access WildFire Server

Assume a Child Process Protection rule exists for powershell.exe in Traps v 4.0. Among the items on the blacklist is ipconfig.exe. How can an administrator permit powershell.exe to execute ipconfig.exe without altering the rest of the blacklist?

• A.Remove ipconfig.exe from the rule's blacklist.
• B.Create a second Child Process Protection rule for powershell.exe to whitelist ipconfig.exe.
• C.Uninstall and reinstall the traps agent.
• D.add ipconfig.exe to the Global Child Processes Whitelist, under Restriction settings.

An ESM server's SSL certificate needs two Enhanced Key Usage purposes:
Client Authentication and ________________

• A.Server Authentication
• B.IP Security User
• C.File Recovery
• D.IP Security Tunnel Termination