Palo Alto Networks PSE-Endpoint Exam - Topic 1 Question 19 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 19
Topic #: 1

A retail company just purchased Traps for its 8,000 endpoints. Many of its users work remotely. The company is not using any VPN solution, but would still like to manage all endpoints regardless where they are.

Which two aspects should be part of the recommendation? (Choose two.)

AAs each ESM Core server can handle up to 30,000 endpoints, use at least 1 ESM Core server internally and 1 ESM core server in the DMZ for external endpoints.

BPlacing an ESM Core server in the DMZ or in a cloud hosting service allows external endpoints to connect to it, even without a VPN client.

CProtection for remote endpoints is currently not supported. Since the ESM servers can only be installed in an internal network, endpoints without VPN will not be able to connect to it.

DIf there is no connection to the ESM Core server, Traps agents automatically connect to WildFire and endpoints are fully protected. No additional ESM Core servers are needed.

Show Suggested Answer

Suggested Answer: A, B

by Avery at May 03, 2022, 11:06 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tiera

4 months ago

D is misleading, you still need ESM for full protection.

upvoted 0 times

...

Kara

4 months ago

B is spot on, cloud hosting is a great option for external endpoints.

upvoted 0 times

...

Alisha

4 months ago

Surprised that protection for remote endpoints isn't supported!

upvoted 0 times

...

Reyes

4 months ago

I disagree, C seems more accurate. No VPN means no connection.

upvoted 0 times

...

Deane

4 months ago

Definitely need an ESM Core in the DMZ for remote access.

upvoted 0 times

...

Avery

5 months ago

I practiced a similar question where we discussed the placement of servers. I think option A could be relevant since having an internal and DMZ server could help manage those endpoints.

upvoted 0 times

...

Billy

5 months ago

I'm not entirely sure, but I remember something about needing a VPN for remote management. Option C might be correct, but I feel like there could be a workaround.

upvoted 0 times

...

Jeanice

5 months ago

I think option B sounds right because it mentions connecting to an ESM Core server in the DMZ without a VPN, which seems crucial for remote users.

upvoted 0 times

...

Selma

5 months ago

I recall that Traps can connect to WildFire if there's no ESM connection, so option D might be a valid choice, but I wonder if that fully covers management needs for remote users.

upvoted 0 times

...

Ryann

5 months ago

This looks like a straightforward question about workflow routing. I'll focus on understanding the key objectives that can be accomplished using business rules.

upvoted 0 times

...

Celeste

5 months ago

Based on my understanding, Deprecation (Transition) seems like the best answer. It represents the point where the product is officially being phased out and no longer supported.

upvoted 0 times

...

Lizette

5 months ago

This seems like a pretty straightforward question. The key is to look for the command that includes both the agent name and the port number, which would be option A.

upvoted 0 times

...

Florinda

5 months ago

Okay, let's see. PRINCE2 is a project management methodology, so I don't think the answer is about behavioral change or interpersonal skills. I'm leaning towards option B, but I'll double-check the other options just to be sure.

upvoted 0 times

...