Palo Alto Networks Exam PSE-Endpoint Topic 2 Question 64 Discussion

Actual exam question for Palo Alto Networks's PSE Endpoint Professional Exam exam

Question #: 64
Topic #: 2

[All PSE Endpoint Professional Exam Questions]

An Administrator has identified an EPM-triggered false positive and has used the Create Rule button from within the relevant entry in the Security Events > Preventions > Exploits tab. What is the result of the created rule?

AThe new rule stops all EPM injection into the faulted process.

BThe new rule stops all EPM injection into processes on the machine on which the prevention was triggered.

CThe new rule excludes the endpoint from Traps protection.

DThe new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.

Show Suggested Answer

Suggested Answer: B

by Kandis at May 22, 2024, 08:44 AM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephaine

4 months ago

Ah, the joys of security events and false positives. At least the 'Create Rule' button doesn't come with a 'Break Everything' option.

upvoted 0 times

...

Dino

4 months ago

D is the right answer, but I can't help but wonder if the 'Create Rule' button is just a fancy way of saying 'Throw more rules at the problem until it goes away'.

upvoted 0 times

Alline

3 months ago

D) The new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.

upvoted 0 times

...

Dawne

3 months ago

B) The new rule stops all EPM injection into processes on the machine on which the prevention was triggered.

upvoted 0 times

...

Carmela

3 months ago

D) The new rule will include the EPM that raised the prevention, the process that triggered the prevention, the machine on which the prevention was triggered, and a descriptive name for the rule.

upvoted 0 times

...