Palo Alto Networks PSE-Endpoint Exam - Topic 1 Question 75 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 75
Topic #: 1

A company discovers through the agent health display in ESM Console that a certain Traps agent is not communicating with ESM Server. Administrators suspect that the problem relates to TLS/SSL.

Which troubleshooting step determines if this is an SSL issue?

AFrom the agent run the command: telnet (hostname) (port)

BCheck that the Traps service is running

CFrom the agent run the command: ping (hostname)

DBrowse to the ESM hostname from the affected agent

Show Suggested Answer

Suggested Answer: D

by Bernardine at Sep 19, 2024, 05:47 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ernest

3 months ago

Browsing to the ESM hostname could give some clues too!

upvoted 0 times

...

Freeman

3 months ago

Definitely not C, ping won't show SSL issues.

upvoted 0 times

...

Cathern

3 months ago

Wait, can ping really help with SSL problems? Seems off.

upvoted 0 times

...

Arlette

4 months ago

I agree, telnet is the best way to test SSL issues.

upvoted 0 times

...

Rebecka

4 months ago

Option A is the right choice! Telnet checks the connection.

upvoted 0 times

...

Jolene

4 months ago

I vaguely recall that browsing to the ESM hostname could help, but I thought that was more for checking general connectivity rather than SSL issues.

upvoted 0 times

...

Quentin

4 months ago

I feel like checking if the Traps service is running is important too, but it doesn't directly tell us about SSL, right?

upvoted 0 times

...

Gerald

4 months ago

I think option A makes sense because if the port is closed or not responding, it could indicate an SSL problem. We had a practice question like this!

upvoted 0 times

...

Devora

5 months ago

I remember we talked about using telnet to check connectivity issues, but I'm not entirely sure if it's the best way to test SSL specifically.

upvoted 0 times

...

Coleen

5 months ago

Browsing to the ESM hostname from the agent seems like a smart move. That will give us a more direct test of the SSL/TLS connection and see if there are any issues there.

upvoted 0 times

...

Toshia

5 months ago

I'm leaning towards the ping command. That will at least tell us if we can reach the ESM server at all, which could help narrow down the problem.

upvoted 0 times

...

Pura

5 months ago

Hmm, I'm not sure about that. Checking if the Traps service is running seems like a good first step to me. We should make sure the agent is up and running before looking at the SSL/TLS connection.

upvoted 0 times

...

Lashunda

5 months ago

I think the telnet command is the way to go here. It should let us test the connection and see if there are any SSL/TLS issues.

upvoted 0 times

...

Renea

5 months ago

This looks tricky. I'll start by carefully listing out the given returns and volatilities from the chart before doing any calculations.

upvoted 0 times

...

Amie

1 year ago

Browsing to the ESM hostname from the agent's machine? That's a bold strategy, Cotton. Let's see if it pays off. (Option D)

upvoted 0 times

Emelda

1 year ago

User 3: Hopefully that will give us some insight into the communication problem.

upvoted 0 times

...

Lucina

1 year ago

User 2: Good idea, let's see if that helps with the SSL issue.

upvoted 0 times

...

Aleta

1 year ago

User 1: Let's try option D and browse to the ESM hostname.

upvoted 0 times

...

Alverta

1 year ago

Actually, browsing to the ESM hostname from the affected agent might also help in identifying the SSL problem.

upvoted 0 times

...

Danica

1 year ago

Haha, I bet the issue is that the agent is trying to connect to the server using a carrier pigeon. Option C is the answer, clearly!

upvoted 0 times

Ivan

1 year ago

User 3: Yeah, I think checking the connection using telnet is the right move.

upvoted 0 times

...

Hyun

1 year ago

User 2: I agree with Hyun, option A seems like the best troubleshooting step.

upvoted 0 times

...

Ressie

1 year ago

Haha, that's a funny thought! But I think option A is the way to go.

upvoted 0 times

...

Lucy

1 year ago

I disagree, I believe checking that the Traps service is running is the key step to troubleshoot this issue.

upvoted 0 times

...

Oliva

1 year ago

Hmm, I'm not sure Option A is the best approach. Wouldn't checking the Traps service status first be a better first step? (Option B)

upvoted 0 times

Arminda

1 year ago

Let's go ahead and check the Traps service status first.

upvoted 0 times

...

Lon

1 year ago

That's a good point. We can then try Option A if the service is running.

upvoted 0 times

...

Cassi

1 year ago

I think we should start by checking if the Traps service is running (Option B).

upvoted 0 times

...

Alverta

1 year ago

I think the troubleshooting step to determine if this is an SSL issue is to run the command: telnet (hostname) (port).

upvoted 0 times

...

Marshall

1 year ago

I agree, trying to establish a direct connection to the server is the best way to troubleshoot this. Option A is the clear choice here.

upvoted 0 times

...

Wynell

1 year ago

Option A seems like the way to go. Testing the connection directly should help us determine if it's an SSL issue.

upvoted 0 times

Nilsa

1 year ago

Hopefully running the telnet command will give us some insight into the problem.

upvoted 0 times

...

Jonelle

1 year ago

I agree, testing the connection directly is a good troubleshooting step.

upvoted 0 times

...

Pamella

1 year ago

Good idea, that should help us figure out if it's an SSL issue.

upvoted 0 times

...

Argelia

1 year ago

Let's try running the telnet command to test the connection.

upvoted 0 times

...

Mitsue

1 year ago

Sounds good, let's see if it's an SSL issue.

upvoted 0 times

...

Alyce

1 year ago

Let's try option A and see if we can test the connection.

upvoted 0 times

...