Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 171:

  Which technique is used to limit information about lost or stolen mobile devices?

  A. Remote erase/wipe
  B. De-centralized software upgrades
  C. Provide jailbreaking tools
  D. Unrestricted geo-location
  A. Remote erase/wipe

  ---

  Explanation/Reference:

• Question 172:

  Which method is used to enumerate vulnerabilities, services, and applications?

  A. Port evasion
  B. Encryption
  C. DNS tunneling
  D. Port scanning
  D. Port scanning

  ---

  Explanation/Reference:

• Question 173:

  How can local systems eliminate vulnerabilities?

  A. Patch systems and software effectively and continuously.
  B. Create preventative memory-corruption techniques.
  C. Perform an attack on local systems.
  D. Test and deploy patches on a focused set of systems.
  D. Test and deploy patches on a focused set of systems.

  ---

  Explanation/Reference:

• Question 174:

  Under which category does an application that is approved by the IT department, such as Office 365, fall?

  A. unsanctioned
  B. prohibited
  C. tolerated
  D. sanctioned
  D. sanctioned

• Question 175:

  From which resource does Palo Alto Networks AutoFocus correlate and gain URL filtering intelligence?

  A. Unit 52
  B. PAN-DB
  C. BrightCloud
  D. MineMeld
  B. PAN-DB

  ---

  Explanation/Reference:

  When you enable URL Filtering, all web traffic is compared against the URL Filtering database, PAN-DB, which contains millions of URLs that have been grouped into about 65 categories.

• Question 176:

  Which pillar of Prisma Cloud application security addresses ensuring that your cloud resources and SaaS applications are correctly configured?

  A. visibility, governance, and compliance
  B. network protection
  C. dynamic computing
  D. compute security
  A. visibility, governance, and compliance

  ---

  Explanation/Reference:

  Ensuring that your cloud resources and SaaS applications are correctly configured and adhere to your organization's security standards from day one is essential to prevent successful attacks. Also, making sure that these applications, and the data they collect and store, are properly protected and compliant is critical to avoid costly fines, a tarnished image, and loss of customer trust. Meeting security standards and maintaining compliant environments at scale, and across SaaS applications, is the new expectation for security teams.

• Question 177:

  Before incorporating the DevSecOps process, when was security applied in the software-development lifecycle?

  A. In every step of the lifecycle
  B. Right in the middle
  C. Right at the end, after the development ended
  D. Right at the beginning, before the development started
  D. Right at the beginning, before the development started

  ---

  Explanation/Reference:

• Question 178:

  Routing Information Protocol (RIP), uses what metric to determine how network traffic should flow?

  A. Shortest Path
  B. Hop Count
  C. Split Horizon
  D. Path Vector
  B. Hop Count

  ---

  Explanation/Reference:

  Routing Information Protocol (RIP) is an example of a distance-vector routing protocol that uses hop count as its routing metric. To prevent routing loops, in which packets effectively get stuck bouncing between various router nodes, RIP implements a hop limit of 15, which limits the size of networks that RIP can support. After a data packet crosses 15 router nodes (hops) between a source and a destination, the destination is considered unreachable.

• Question 179:

  What is a method a security operating platform uses to reduce threats?

  A. Enabling applications based on user and device requirements and blocking unneeded applications
  B. Allowing all SaaS applications
  C. Enabling all cloud native applications that are part of the Dev/Sec/Ops CI/CD pipeline
  D. Disabling all SaaS applications
  A. Enabling applications based on user and device requirements and blocking unneeded applications

  ---

  Explanation/Reference:

• Question 180:

  Which two of the following are CaaS services? (Choose two.)

  A. Amazon ECS
  B. Google Edge TPU
  C. Azure AKS
  D. IBM Cloudant
  A. Amazon ECS
  C. Azure AKS

  ---

  Explanation/Reference: