Palo Alto Networks PSE-Endpoint Exam - Topic 2 Question 47 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 47
Topic #: 2

A deployment contains some machines that are not part of the domain. The Accounting and Sales departments are two of these.

How can a policy of WildFire notification be applied to Accounting, and a policy of WildFire prevention be applied to Sales, while not affecting any other WildFire policies?

ACreate the rules and use the Objects tab to add Accounting and Sales to each rule they should apply to.

BCreate a condition for an application found on an Accounting machine. Use that condition for the Accounting groups rule, and create the rule tor Sales without any conditions.

CCreate two rules for WildFire: one for prevention, and one for notification. Make sure the Accounting rule is numbered higher.

DCreate group-specific registry entries on endpoints. Use these registry entries to create conditions for the WildFire rules

Show Suggested Answer

Suggested Answer: C

by Quentin at Jul 08, 2023, 08:46 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Margarett

3 months ago

I like A, but I wonder if it really won't affect other policies.

upvoted 0 times

...

Gracia

3 months ago

Wait, can we really use registry entries like in D? Sounds complicated.

upvoted 0 times

...

Heike

4 months ago

I disagree, C is the way to go, rule numbering matters!

upvoted 0 times

...

Sylvia

4 months ago

I think B is better, conditions help target specific apps.

upvoted 0 times

...

Zack

4 months ago

Option A seems straightforward, just add them to the rules.

upvoted 0 times

...

Roselle

4 months ago

I vaguely recall something about registry entries in our last session, but I’m not sure how that ties into WildFire policies. Option D seems a bit complex.

upvoted 0 times

...

Kate

4 months ago

I feel like creating two separate rules is a good idea, but I’m not confident about the numbering part in option C. Does the order really matter?

upvoted 0 times

...

Selma

5 months ago

This question feels familiar; I think we practiced something similar where we had to create conditions for different departments. Maybe option B is the way to go?

upvoted 0 times

...

Casey

5 months ago

I remember we discussed how to apply different policies to specific groups, but I'm not sure if using the Objects tab is the best approach here.

upvoted 0 times

...

Donte

5 months ago

Alright, I've got a good handle on BGP communities. I think the key here is figuring out which communities are being set based on the policy.

upvoted 0 times

...

Karma

5 months ago

I lean towards under the stage since it might reduce unnecessary interference, but I feel like they're looking for a more open option like above the stage.

upvoted 0 times

...

Ling

5 months ago

I seem to recall reading that failover support is a major reason for implementing redundancy, so I feel confident this is true.

upvoted 0 times

...