Palo Alto Networks Exam PSE-Endpoint Topic 1 Question 27 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 27
Topic #: 1

An administrator receives a number of email alerts indicating WildFire has prevented a malicious activity. All the prevention events refer to launching an Install Wizard that has received a benign verdict from WildFire. All prevention events are reported on a subset of endpoints, that have recently been migrated Mom another Traps deployment.

Which two troubleshooting actions are relevant to this investigation? (Choose two.)

ACheck that the servers xml file has been cleared on the migrated endpoints.

BCheck that the ClientInfoHash tag has been cleared on the migrated endpoints.

CCheck that the actions xml file has not been cleared on the migrated endpoints.

DCheck that the WildFire cache has been cleared on the migrated endpoints.

Show Suggested Answer

Suggested Answer: D

by Glenn at May 05, 2022, 10:06 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pamella

5 days ago

You know, this question makes me wonder if the person who wrote it had a vendetta against Install Wizards. But in all seriousness, I agree that checking the ClientInfoHash tag and the WildFire cache are the way to go.

upvoted 0 times

...

Lili

6 days ago

Ah, I see. This is all about the migration process and ensuring the proper settings are carried over. Clearing the actions.xml file is crucial, as it could be causing issues with the Install Wizard.

upvoted 0 times

...

Miles

7 days ago

I think checking the servers.xml file is a good first step, but the ClientInfoHash tag seems more relevant in this case since it's specifically mentioned in the question. The WildFire cache should also be cleared on the migrated endpoints.

upvoted 0 times

...