Palo Alto Networks Exam PSE-Endpoint Topic 2 Question 62 Discussion

Actual exam question for Palo Alto Networks's PSE-Endpoint exam

Question #: 62
Topic #: 2

In a scenario where winword.exe, Microsoft Word application, is behaving abnormally, how would the administrator verify if Traps DLLs are injected to the process?

ARun 'cytool policy winword.exe

BUse Process Explore to find Traps DLLs injected to the process

COpen the add-ins tab in Word's options to find Traps add-in

DUse 'Ninja mode' in the policy editing screen in the ESM to find winword.exe

Show Suggested Answer

Suggested Answer: B

by Buddy at Apr 26, 2024, 11:03 PM

Limited Time Offer

25%

Off

Get Premium PSE-Endpoint Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bronwyn

3 days ago

A sounds interesting, but I'm not familiar with 'cytool'. Stick with the tried and true Process Explorer, option B.

upvoted 0 times

...

Hyun

11 days ago

C looks promising, but I'm not convinced the add-ins tab will show Traps. Gotta go with B to be sure.

upvoted 0 times

...

Mitsue

14 days ago

I'm not sure, but I think option A) Run 'cytool policy winword.exe might also work to verify the DLLs.

upvoted 0 times

...

Rikki

15 days ago

I agree with Reena, using Process Explore seems like the best way to verify if Traps DLLs are injected.

upvoted 0 times

...

Reena

17 days ago

I think the answer is B) Use Process Explore to find Traps DLLs injected to the process.

upvoted 0 times

...

Viva

19 days ago

I think running 'cytool policy winword.exe' could also be a good option to check for Traps DLLs.

upvoted 0 times

...

Annmarie

22 days ago

I agree with Hershel, using Process Explore seems like the best way to verify if Traps DLLs are injected.

upvoted 0 times

...

Mi

23 days ago

Definitely B. Process Explorer is the way to go to find those pesky Traps DLLs. Anything less and you're just guessing.

upvoted 0 times

Zoila

3 days ago

A) Run 'cytool policy winword.exe

upvoted 0 times

...

Mica

4 days ago

B) Use Process Explorer to find Traps DLLs injected to the process

upvoted 0 times

...

Hershel

25 days ago

I think the administrator should use Process Explore to find Traps DLLs injected to the process.

upvoted 0 times

...