Palo Alto Networks PSE-Endpoint Exam - Topic 1 Question 63 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 63
Topic #: 1

Assume a Child Process Protection rule exists for powershell.exe in Traps v 4.0. Among the items on the blacklist is ipconfig.exe. How can an administrator permit powershell.exe to execute ipconfig.exe without altering the rest of the blacklist?

Aadd ipconfig.exe to the Global Child Processes Whitelist, under Restriction settings.

BUninstall and reinstall the traps agent.

CCreate a second Child Process Protection rule for powershell.exe to whitelist ipconfig.exe.

DRemove ipconfig.exe from the rule's blacklist.

Show Suggested Answer

Suggested Answer: A

by Nelida at May 08, 2024, 04:06 PM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Graham

3 months ago

Definitely don’t want to mess with the blacklist, so A or C makes sense.

upvoted 0 times

...

Blondell

3 months ago

Removing from the blacklist? That sounds risky!

upvoted 0 times

...

Rachael

3 months ago

Wait, why would you uninstall the agent? That’s just unnecessary.

upvoted 0 times

...

Christene

4 months ago

I think C could work too, but A seems simpler.

upvoted 0 times

...

Glenna

4 months ago

Option A is the way to go!

upvoted 0 times

...

Barney

4 months ago

Removing ipconfig.exe from the blacklist sounds tempting, but I feel like that would change the overall security posture. I think we need to keep it on the blacklist somehow.

upvoted 0 times

...

Iola

4 months ago

Uninstalling and reinstalling the traps agent seems like overkill for this situation. I doubt that's the correct answer.

upvoted 0 times

...

Barbra

4 months ago

I remember a practice question where we had to create a specific rule for a process. Maybe creating a second Child Process Protection rule for powershell.exe is the way to go?

upvoted 0 times

...

Kristin

5 months ago

I think adding ipconfig.exe to the Global Child Processes Whitelist might be the right move, but I'm not entirely sure if that would work without affecting other settings.

upvoted 0 times

...

Orville

5 months ago

Uninstalling and reinstalling the Traps agent doesn't seem like the right solution here. I'll focus on the whitelisting options.

upvoted 0 times

...

Rodrigo

5 months ago

I'm a bit confused on the difference between creating a second rule and removing ipconfig.exe from the blacklist. I'll need to double-check the details.

upvoted 0 times

...

Dalene

5 months ago

Ah, I see. Adding ipconfig.exe to the Global Child Processes Whitelist seems like the most straightforward approach.

upvoted 0 times

...

Clemencia

5 months ago

Okay, let's see. I think the key here is finding a way to whitelist ipconfig.exe without modifying the overall blacklist.

upvoted 0 times

...

Carissa

5 months ago

Hmm, this looks like a tricky one. I'll need to think through the options carefully.

upvoted 0 times

...

Ty

5 months ago

Hmm, this seems a bit tricky. Okay, let me walk through it. The patient weighs 68kg, and the dose is 0.9mg/kg, so the total dose is 61.2mg. The bolus is 10% of that, which is 6.12mg, and the infusion is the remaining 90%, which is 55.08mg. With a concentration of 1mg/ml, that means the bolus is 6.12ml and the infusion is 55.08ml. I'm not 100% sure, but I think that's the right answer. I'll double-check my work just to be safe.

upvoted 0 times

...

Azalee

5 months ago

I'm pretty certain we practiced a similar question, and the alt attribute was emphasized as essential for images.

upvoted 0 times

...

Stephen

5 months ago

This seems straightforward. The question is asking about the network type for the AKS cluster, and the key requirement is that on-premises clients need to connect to the app using the pod IP address. Based on that, I think the Azure CNI network type is the best choice.

upvoted 0 times

...

Arlette

5 months ago

Hmm, I'm a bit unsure about how to approach this. I know we need to find the break-even point, but I'm not sure if I should be looking at total revenue, total costs, or something else.

upvoted 0 times

...