Palo Alto Networks Certified Cybersecurity Associate PCCET Questions & Answers

• Question 11:

  Which option describes the "selective network security virtualization" phase of incrementally transforming data centers?

  A. during the selective network security virtualization phase, all intra-host communication paths are strictly controlled

  B. during the selective network security virtualization phase, all intra-host traffic is forwarded to a Web proxy server

  C. during the selective network security virtualization phase, all intra-host traffic is encapsulated and encrypted using the IPSEC protocol

  D. during the selective network security virtualization phase, all intra-host traffic is load balanced

  Correct Answer: A

  Selective network security virtualization: Intra-host communications and live migrations are architected at this phase. All intra-host communication paths are strictly controlled to ensure that traffic between VMs at different trust levels is intermediated either by an on- box, virtual security appliance or by an off-box, physical security appliance.

• Question 12:

  Which tool supercharges security operations center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security?

  A. Prisma SAAS

  B. WildFire

  C. Cortex XDR

  D. Cortex XSOAR

  Correct Answer: D

  Cortex XSOAR enhances Security Operations Center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security. Cortex XSOAR unifies case management, automation, real-time collaboration, and native threat intel management in the industry's first extended security orchestration, automation, and response (SOAR) offering.

• Question 13:

  Which network device breaks networks into separate broadcast domains?

  A. Hub

  B. Layer 2 switch

  C. Router

  D. Wireless access point

  Correct Answer: C

  A layer 2 switch will break up collision domains but not broadcast domains. To break up broadcast domains you need a Layer 3 switch with vlan capabilities.

• Question 14:

  In which step of the cyber-attack lifecycle do hackers embed intruder code within seemingly innocuous files?

  A. weaponization

  B. reconnaissance

  C. exploitation

  D. delivery

  Correct Answer: A

  "Weaponization: Next, attackers determine which methods to use to compromise a target endpoint. They may choose to embed intruder code within seemingly innocuous files such as a PDF or Microsoft Word document or email message."

• Question 15:

  Which core component is used to implement a Zero Trust architecture?

  A. VPN Concentrator

  B. Content Identification

  C. Segmentation Platform

  D. Web Application Zone

  Correct Answer: C

  "Remember that a trust zone is not intended to be a "pocket of trust" where systems (and therefore threats) within the zone can communicate freely and directly with each other. For a full Zero Trust implementation, the network would be configured to ensure that all communications traffic, including traffic between devices in the same zone, is intermediated by the corresponding Zero Trust Segmentation Platform."

• Question 16:

  On an endpoint, which method should you use to secure applications against exploits?

  A. endpoint-based firewall

  B. strong user passwords

  C. full-disk encryption

  D. software patches

  Correct Answer: D

  New software vulnerabilities and exploits are discovered all the time and thus diligent software patch management is required by system and security administrators in every organization.

• Question 17:

  What is a characteristic of the National Institute Standards and Technology (NIST) defined cloud computing model?

  A. requires the use of only one cloud service provider

  B. enables on-demand network services

  C. requires the use of two or more cloud service providers

  D. defines any network service

  Correct Answer: B

  Cloud computing is not a location but rather a pool of resources that can be rapidly provisioned in an automated, on-demand manner.

• Question 18:

  In the attached network diagram, which device is the switch?

  

  A. A

  B. B

  C. C

  D. D

  Correct Answer: D

• Question 19:

  Which three layers of the OSI model correspond to the Application Layer (L4) of the TCP/IP model?

  A. Session, Transport, Network

  B. Application, Presentation, and Session

  C. Physical, Data Link, Network

  D. Data Link, Session, Transport

  Correct Answer: B

  Application (Layer 4 or L4): This layer loosely corresponds to Layers 5 through 7 of the OSI model. Transport (Layer 3 or L3): This layer corresponds to Layer 4 of the OSI model. Internet (Layer 2 or L2): This layer corresponds to Layer 3 of the OSI model. Network Access (Layer 1 or L1): This layer corresponds to Layers 1 and 2 of the OSI model

• Question 20:

  Which product from Palo Alto Networks enables organizations to prevent successful cyberattacks as well as simplify and strengthen security processes?

  A. Expedition

  B. AutoFocus

  C. MineMeld

  D. Cortex XDR

  Correct Answer: D

  From a business perspective, XDR platforms enable organizations to prevent successful cyberattacks as well as simplify and strengthen security processes.