Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 151:

  Which endpoint tool or agent can enact behavior-based protection?

  A. AutoFocus
  B. Cortex XDR
  C. DNS Security
  D. MineMeld
  B. Cortex XDR

• Question 152:

  Which core component is used to implement a Zero Trust architecture?

  A. VPN Concentrator
  B. Content Identification
  C. Segmentation Platform
  D. Web Application Zone
  C. Segmentation Platform

  ---

  Explanation/Reference:

  "Remember that a trust zone is not intended to be a "pocket of trust" where systems (and therefore threats) within the zone can communicate freely and directly with each other. For a full Zero Trust implementation, the network would be configured to ensure that all communications traffic, including traffic between devices in the same zone, is intermediated by the corresponding Zero Trust Segmentation Platform."

• Question 153:

  What are two key characteristics of a Type 1 hypervisor? (Choose two.)

  A. is hardened against cyber attacks
  B. runs without any vulnerability issues
  C. runs within an operating system
  D. allows multiple, virtual (or guest) operating systems to run concurrently on a single physical host computer
  C. runs within an operating system
  D. allows multiple, virtual (or guest) operating systems to run concurrently on a single physical host computer

• Question 154:

  Which two characteristics are associated with a security zone? (Choose two.)

  A. Perimeter-based network security
  B. Trust levels
  C. Cloud-based network security
  D. Segmentation
  A. Perimeter-based network security
  D. Segmentation

  ---

  Explanation/Reference:

• Question 155:

  Which method is used to exploit vulnerabilities, services, and applications?

  A. encryption
  B. port scanning
  C. DNS tunneling
  D. port evasion
  D. port evasion

  ---

  Explanation/Reference:

  Attack communication traffic is usually hidden with various techniques and tools, including: Encryption with SSL, SSH (Secure Shell), or some other custom or proprietary encryption Circumvention via proxies, remote access tools, or tunneling. In some instances, use of cellular networks enables complete circumvention of the target network for attack C2 traffic. Port evasion using network anonymizers or port hopping to traverse over any available open ports Fast Flux (or Dynamic DNS) to proxy through multiple infected endpoints or multiple, ever-changing C2 servers to reroute traffic and make determination of the true destination or attack source difficult DNS tunneling is used for C2 communications and data infiltration

• Question 156:

  What type of area network connects end-user devices?

  A. Wide Area Network (WAN)
  B. Campus Area Network (CAN)
  C. Local Area Network (LAN)
  D. Personal Area Network (PAN)
  C. Local Area Network (LAN)

  ---

  Explanation/Reference:

  Reference: https://www.spiceworks.com/tech/networking/articles/what-is-local-area-network/#:~:text=A%20local%20area%20network%20(LAN)%20is%20a%20connected%20environment%20spanning,ethernet%20and%20Wi%2DFi% 20technology

• Question 157:

  Which three layers of the OSI model correspond to the Application Layer (L4) of the TCP/IP model?

  A. Session, Transport, Network
  B. Application, Presentation, and Session
  C. Physical, Data Link, Network
  D. Data Link, Session, Transport
  B. Application, Presentation, and Session

  ---

  Explanation/Reference:

  Application (Layer 4 or L4): This layer loosely corresponds to Layers 5 through 7 of the OSI model. Transport (Layer 3 or L3): This layer corresponds to Layer 4 of the OSI model. Internet (Layer 2 or L2): This layer corresponds to Layer 3 of the OSI model. Network Access (Layer 1 or L1): This layer corresponds to Layers 1 and 2 of the OSI model

• Question 158:

  Which technique changes protocols at random during a session?

  A. use of non-standard ports
  B. port hopping
  C. hiding within SSL encryption
  D. tunneling within commonly used services
  B. port hopping

  ---

  Explanation/Reference:

  Port hopping, in which ports and protocols are randomly changed during a session.

• Question 159:

  What is a characteristic of the National Institute Standards and Technology (NIST) defined cloud computing model?

  A. requires the use of only one cloud service provider
  B. enables on-demand network services
  C. requires the use of two or more cloud service providers
  D. defines any network service
  B. enables on-demand network services

  ---

  Explanation/Reference:

  Cloud computing is not a location but rather a pool of resources that can be rapidly provisioned in an automated, on-demand manner.

• Question 160:

  DRAG DROP

  Match the Palo Alto Networks WildFire analysis verdict with its definition.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Benign: Safe and does not exhibit malicious behavior Grayware: No security risk but might display obtrusive behavior (for example, adware, spyware, and browser helper objects)

  Malware: Malicious in nature and intent and can pose a security threat (for example, viruses, worms, trojans, root kits, botnets, and remote-access toolkits) Phishing: Malicious attempt to trick the recipient into revealing sensitive data