Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 101:

  Which technique uses file sharing or an instant messenger client such as Meebo running over Hypertext Transfer Protocol (HTTP)?

  A. Use of non-standard ports
  B. Hiding within SSL encryption
  C. Port hopping
  D. Tunneling within commonly used services
  D. Tunneling within commonly used services

  ---

  Explanation/Reference:

• Question 102:

  Which protocol is responsible for the translation of an IP address to a MAC address?

  A. DNS
  B. ARP
  C. NAT
  D. DHCP
  B. ARP

  ---

  Explanation/Reference:

  Reference: https://www.techtarget.com/searchnetworking/definition/Address-Resolution-Protocol-ARP#:~:text=Address%20Resolution%20Protocol%20(ARP)%20is,access%20control%20(MAC)%20address

• Question 103:

  Which organizational function is responsible for security automation and eventual vetting of the solution to help ensure consistency through machine-driven responses to security issues?

  A. NetOps
  B. SecOps
  C. SecDevOps
  D. DevOps
  B. SecOps

  ---

  Explanation/Reference:

  Security operations (SecOps) is a necessary function for protecting the digital way of life, for global businesses and customers. SecOps requires continuous improvement in operations to handle fast- evolving threats. SecOps needs to arm security operations professionals with high-fidelity intelligence, contextual data, and automated prevention workflows to quickly identify and respond to these threats. SecOps must leverage automation to reduce strain on analysts and execute the Security Operation Center's (SOC) mission to identify, investigate, and mitigate threats.

• Question 104:

  DRAG DROP

  Match the IoT connectivity description with the technology.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 105:

  What does the MITRE ATTandCK matrix techniques contain?

  A. A set of specific implementations an attacker uses for techniques.
  B. A set of techniques to be used after an attack has occurred.
  C. A set of techniques used by adversaries to accomplish an objective.
  D. A set of goals or reasoning for performing an action.
  C. A set of techniques used by adversaries to accomplish an objective.

  ---

  Explanation/Reference:

• Question 106:

  What is the proper subnet mask for the network 192.168.55.0/27?

  A. 255.255.255.192
  B. 255.255.255.248
  C. 255.255.255.224
  D. 255.255.255.0
  C. 255.255.255.224

  ---

  Explanation/Reference:

• Question 107:

  If an endpoint does not know how to reach its destination, what path will it take to get there?

  A. The endpoint will broadcast to all connected network devices.
  B. The endpoint will not send the traffic until a path is clarified.
  C. The endpoint will send data to the specified default gateway.
  D. The endpoint will forward data to another endpoint to send instead.
  C. The endpoint will send data to the specified default gateway.

  ---

  Explanation/Reference:

• Question 108:

  DRAG DROP

  Order the OSI model with Layer7 at the top and Layer1 at the bottom.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 109:

  Which NGFW feature is used to provide continuous identification, categorization, and control of known and previously unknown SaaS applications?

  A. User-ID
  B. Device-ID
  C. App-ID
  D. Content-ID
  C. App-ID

  ---

  Explanation/Reference:

  App-IDTM technology leverages the power of the broad global community to provide continuous identification, categorization, and granular risk-based control of known and previously unknown SaaS applications, ensuring new applications are discovered automatically as they become popular.

• Question 110:

  Which of the following is a service that allows you to control permissions assigned to users in order for them to access and utilize cloud resources?

  A. User-ID
  B. Lightweight Directory Access Protocol (LDAP)
  C. User and Entity Behavior Analytics (UEBA)
  D. Identity and Access Management (IAM)
  D. Identity and Access Management (IAM)

  ---

  Explanation/Reference:

  Identity and access management (IAM) is a software service or framework that allows organizations to define user or group identities within software environments, then associate permissions with them. The identities and permissions are usually spelled out in a text file, which is referred to as an IAM policy.