Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 1:

  In which step of the cyber-attack lifecycle do hackers embed intruder code within seemingly innocuous files?

  A. weaponization
  B. reconnaissance
  C. exploitation
  D. delivery
  A. weaponization

  ---

  Explanation/Reference:

  "Weaponization: Next, attackers determine which methods to use to compromise a target endpoint. They may choose to embed intruder code within seemingly innocuous files such as a PDF or Microsoft Word document or email message."

• Question 2:

  Which endpoint product from Palo Alto Networks can help with SOC visibility?

  A. STIX
  B. Cortex XDR
  C. WildFire
  D. AutoFocus
  B. Cortex XDR

  ---

  Explanation/Reference:

  XDR solutions bring a proactive approach to threat detection and response. It delivers visibility across all data, including endpoint, network, and cloud data, while applying analytics and automation to address today's increasingly sophisticated threats. With XDR, cybersecurity teams can: Identify hidden, stealthy, and sophisticated threats proactively and quickly Track threats across any source or location within the organization Increase the productivity of the people operating the technology Get more out of their security investments Conclude investigations more efficiently

• Question 3:

  An administrator has just completed the “Consolidating servers within trust levels” phase of hybrid data-center security. Which phase does the administrator perform next?

  A. Selective network security virtualization
  B. Dynamic computing fabric
  C. Generate server inventory
  D. Consolidating servers across trust levels
  D. Consolidating servers across trust levels

  ---

  Explanation/Reference:

• Question 4:

  What are three benefits of SD-WAN infrastructure? (Choose three.)

  A. Improving performance of SaaS applications by requiring all traffic to be back-hauled through the corporate headquarters network
  B. Promoting simplicity through the utilization of a centralized management structure
  C. Utilizing zero-touch provisioning for automated deployments
  D. Leveraging remote site routing technical support by relying on MPLS
  E. Improving performance by allowing efficient access to cloud-based resources without requiring back- haul traffic to a centralized location
  B. Promoting simplicity through the utilization of a centralized management structure
  C. Utilizing zero-touch provisioning for automated deployments
  E. Improving performance by allowing efficient access to cloud-based resources without requiring back- haul traffic to a centralized location

  ---

  Explanation/Reference:

  Simplicity: Because each device is centrally managed, with routing based on application policies, WAN managers can create and update security rules in real time as network requirements change. Also, when SD-WAN is combined with zero-touch provisioning, a feature that helps automate the deployment and configuration processes, organizations can further reduce the complexity, resources, and operating expenses required to spin up new sites. Improved performance: By allowing efficient access to cloud- based resources without the need to backhaul traffic to centralized locations, organizations can provide a better user experience.

• Question 5:

  What is the goal of a watering hole attack?

  A. Compromise websites that are likely to be visited by a targeted victim
  B. Target senior executives or other high-profile individuals within an organization
  C. Use specific information about the target to make the phishing attempt appear legitimate
  D. Redirect a legitimate website's traffic to a fake site
  A. Compromise websites that are likely to be visited by a targeted victim

  ---

  Explanation/Reference:

  Reference: https://www.proofpoint.com/au/threat-reference/watering-hole

• Question 6:

  How does adopting a serverless model impact application development?

  A. costs more to develop application code because it uses more compute resources
  B. slows down the deployment of application code, but it improves the quality of code development
  C. reduces the operational overhead necessary to deploy application code
  D. prevents developers from focusing on just the application code because you need to provision the underlying infrastructure to run the code
  C. reduces the operational overhead necessary to deploy application code

  ---

  Explanation/Reference:

  List three advantages of serverless computing over CaaS: - Reduce costs - Increase agility - Reduce operational overhead

• Question 7:

  Which not-for-profit organization maintains the common vulnerability exposure catalog that is available through their public website?

  A. Department of Homeland Security
  B. MITRE
  C. Office of Cyber Security and Information Assurance
  D. Cybersecurity Vulnerability Research Center
  B. MITRE

• Question 8:

  DRAG DROP

  Match each description to a Security Operating Platform key capability.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 9:

  When signature-based antivirus software detects malware, what three things does it do to provide protection? (Choose three.)

  A. decrypt the infected file using base64
  B. alert system administrators
  C. quarantine the infected file
  D. delete the infected file
  E. remove the infected file's extension
  C. quarantine the infected file
  D. delete the infected file
  E. remove the infected file's extension

• Question 10:

  What is the recommended method for collecting security logs from multiple endpoints?

  A. Leverage an EDR solution to request the logs from endpoints.
  B. Connect to the endpoints remotely and download the logs.
  C. Configure endpoints to forward logs to a SIEM.
  D. Build a script that pulls down the logs from all endpoints.
  C. Configure endpoints to forward logs to a SIEM.

  ---

  Explanation/Reference: