Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 121:

  Which solution was designed to help organizations embrace cloud and mobility by providing network and network security services from a common cloud-delivered architecture?

  A. Secure access service edge (SASE)
  B. Next-Generation Firewall (NGFW)
  C. Software as a service (SaaS)
  D. Security orchestration automation and response (SOAR)
  A. Secure access service edge (SASE)

  ---

  Explanation/Reference:

  Reference: https://www.macronetllc.com/5-elements-of-a-strong-sase-architecture/#:~:text=To%20address%20these%20changes%2C%20secure,of%20traffic%20and%20security%20threats

• Question 122:

  Identify a weakness of a perimeter-based network security strategy to protect an organization's endpoint systems.

  A. It cannot identify command-and-control traffic
  B. It assumes that all internal devices are untrusted
  C. It assumes that every internal endpoint can be trusted
  D. It cannot monitor all potential network ports
  C. It assumes that every internal endpoint can be trusted

  ---

  Explanation/Reference:

• Question 123:

  Which capability of a Zero Trust network security architecture leverages the combination of application, user, and content identification to prevent unauthorized access?

  A. Cyber threat protection
  B. Inspection of all traffic
  C. Least privileges access control
  D. Network segmentation
  C. Least privileges access control

  ---

  Explanation/Reference:

• Question 124:

  How does Cortex XSOAR improve the efficiency of security operations?

  A. It controls who has access to resources on the network with user and permission mapping.
  B. It aggregates logs from multiple sources that are viewable via a query language.
  C. It enriches and responds to incidents and alerts via process-driven playbooks.
  D. It delivers consistent security to mobile users and remote networks.
  C. It enriches and responds to incidents and alerts via process-driven playbooks.

  ---

  Explanation/Reference:

• Question 125:

  Which network device breaks networks into separate broadcast domains?

  A. Hub
  B. Layer 2 switch
  C. Router
  D. Wireless access point
  C. Router

  ---

  Explanation/Reference:

  A layer 2 switch will break up collision domains but not broadcast domains. To break up broadcast domains you need a Layer 3 switch with vlan capabilities.

• Question 126:

  Which endpoint security solution protects against malicious software designed to invade a device and collect user data?

  A. Anti-spyware
  B. Anti-virus
  C. Sandboxing
  D. Software-defined wide-area networks (SD-WAN)
  B. Anti-virus

  ---

  Explanation/Reference:

• Question 127:

  What protocol requires all routers in the same domain to maintain a map of the network?

  A. EIGRP
  B. Static
  C. RIP
  D. OSPF
  D. OSPF

  ---

  Explanation/Reference:

• Question 128:

  Which two tools are used for both DevOps and software development? (Choose two.)

  A. Scikit-learn
  B. Jenkins
  C. Tensorflow
  D. Git
  B. Jenkins
  D. Git

  ---

  Explanation/Reference:

• Question 129:

  Which characteristic of serverless computing enables developers to quickly deploy application code?

  A. Uploading cloud service autoscaling services to deploy more virtual machines to run their application code based on user demand
  B. Uploading the application code itself, without having to provision a full container image or any OS virtual machine components
  C. Using cloud service spot pricing to reduce the cost of using virtual machines to run their application code
  D. Using Container as a Service (CaaS) to deploy application containers to run their code.
  B. Uploading the application code itself, without having to provision a full container image or any OS virtual machine components

  ---

  Explanation/Reference:

  "In serverless apps, the developer uploads only the app package itself, without a full container image or any OS components. The platform dynamically packages it into an image, runs the image in a container, and (if needed) instantiates the underlying host OS and VM and the hardware required to run them."

• Question 130:

  Which option is a sequence of events that an attacker would perform to infiltrate a network and steal data?

  A. Advanced persistent threats
  B. Cyber-attack lifecycle
  C. Evil twin
  D. Spamming botnets
  B. Cyber-attack lifecycle

  ---

  Explanation/Reference:

  Reference: https://www.copycei.com/cyber-attack-lifecycle/#:~:text=The%20cyber%20attack%20lifecycle%20is,top%2Dquality%20managed%20network%20security