U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Endpoint Exam - Topic 2 Question 53 Discussion

An administrator is concerned about rogue installs of Internet Explorer.Which policy can be created to assure that Internet Explorer can only run from the \Program Files \Internet Explorer \directory?
D) An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for %programfiles%\Internet Explorer\iexplore.exe
A) An execution path policy to blacklist iexplore.exe, and whitelist entry for %programfiles%\iexplore.exe
B) An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe
C) A whitelist of *\iexplore.exe with an execution path restriction, and a blackfirst of %system%\iexplore.exe

Palo Alto Networks PSE-Endpoint Exam - Topic 2 Question 53 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam
Question #: 53
Topic #: 2
[All PSE-Endpoint Questions]

An administrator is concerned about rogue installs of Internet Explorer.

Which policy can be created to assure that Internet Explorer can only run from the \Program Files \Internet Explorer \directory?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Bernardo at Nov 24, 2023, 10:42 PM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Nidia
7 months ago
B is interesting, but I’m not sure it covers all bases.
upvoted 0 times
...
Reita
7 months ago
Wait, can we really trust this method? Sounds too simple.
upvoted 0 times
...
Alona
7 months ago
Definitely D, it’s the safest choice.
upvoted 0 times
...
Rikki
8 months ago
I think A is better, whitelisting is key here.
upvoted 0 times
...
Loren
8 months ago
Option D seems right, it restricts rogue installs effectively.
upvoted 0 times
...
Nichelle
8 months ago
I’m leaning towards option D because it seems to combine both blacklisting and whitelisting correctly for the specified directory.
upvoted 0 times
...
Wendell
8 months ago
I feel like blacklisting *\iexplore.exe could be risky, but I can't recall if it would actually prevent rogue installs effectively.
upvoted 0 times
...
Latrice
8 months ago
I remember a similar question about restricting applications, and I think whitelisting is definitely the way to go for this scenario.
upvoted 0 times
...
Anthony
9 months ago
I think we discussed execution path policies in class, but I'm not entirely sure how to apply them here.
upvoted 0 times
...
Horace
9 months ago
This is a great question that really tests our understanding of execution path policies. I'm going to carefully consider each option and make sure I select the one that best meets the requirements.
upvoted 0 times
...
Shawna
9 months ago
I've got a good feeling about option D. Blacklisting everything except the specific directory seems like the most straightforward way to address the issue of rogue installs.
upvoted 0 times
...
Tamala
9 months ago
I'm a bit confused by the different blacklist and whitelist options. I'll need to review the details of each policy type to make sure I select the right one.
upvoted 0 times
...
Ruth
9 months ago
Okay, let's see here. I think the key is to create a policy that allows iexplore.exe to run, but only from the specific directory specified. Option D looks like it might do the trick.
upvoted 0 times
...
Mirta
9 months ago
Hmm, this seems like a tricky one. I'll need to think through the different policy options carefully to make sure I understand the implications of each.
upvoted 0 times
...
Rodolfo
9 months ago
I'm feeling pretty confident about this one. I'll carefully analyze the options and select the three statements that I believe are true.
upvoted 0 times
...
Tyisha
9 months ago
Creating separate data extensions for each communication type seems like it could get messy and complicated to manage. I'm leaning more towards the option of using Boolean fields in the master data extension.
upvoted 0 times
...
Herman
9 months ago
This looks like a straightforward question on testing static routes. I'm pretty confident I can figure this out.
upvoted 0 times
...
Haydee
2 years ago
Okay, let's look at the options. I'm leaning towards D - it seems to directly address the requirement of only allowing IE to run from the specified directory.
upvoted 0 times
...
Kristine
2 years ago
Hmm, I think the key here is to focus on the goal of the policy - to ensure that IE can only run from the specified directory. Let's think this through carefully.
upvoted 0 times
...
Patria
2 years ago
Yeah, it seems like they're really trying to test our knowledge of the intricacies of execution path policies. I'm not sure I'm comfortable with that level of detail.
upvoted 0 times
...
Haydee
2 years ago
Wow, this question is really specific. I wonder how often they ask these kinds of niche policy questions on the exam.
upvoted 0 times
Cristen
2 years ago
D) An execution path policy to blacklist *\iexplore.exe, and a whitelist entry for %programfiles%\Internet Explorer\iexplore.exe
upvoted 0 times
...
Brett
2 years ago
C) A whitelist of *\iexplore.exe with an execution path restriction, and a blacklist of %system%\iexplore.exe
upvoted 0 times
...
Leanora
2 years ago
B) An execution path policy to blacklist *\iexplore.exe. Trusted signers will allow the default iexplore.exe
upvoted 0 times
...
Dottie
2 years ago
A) An execution path policy to blacklist iexplore.exe, and whitelist entry for %programfiles%\iexplore.exe
upvoted 0 times
...
...

Save Cancel