Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 11:

  Which statement describes DevOps?

  A. DevOps is its own separate team
  B. DevOps is a set of tools that assists the Development and Operations teams throughout the software delivery process
  C. DevOps is a combination of the Development and Operations teams
  D. DevOps is a culture that unites the Development and Operations teams throughout the software delivery process
  D. DevOps is a culture that unites the Development and Operations teams throughout the software delivery process

  ---

  Explanation/Reference:

  DevOps is not:

  A combination of the Dev and Ops teams: There still are two teams; they just operate in a communicative, collaborative way.

  Its own separate team: There is no such thing as a "DevOps engineer." Although some companies may appoint a "DevOps team" as a pilot when trying to transition to a DevOps culture, DevOps refers to a culture where developers, testers,

  and operations personnel cooperate throughout the entire software delivery lifecycle. A tool or set of tools: Although there are tools that work well with a DevOps model or help promote DevOps culture, DevOps ultimately is a strategy, not a

  tool. Automation: Although automation is very important for a DevOps culture, it alone does not define DevOps.

• Question 12:

  In what way does a DDoS attack differ from a DoS attack?

  A. It typically uses a script or a tool to carry out the attack from a single machine.
  B. It tries to cause denial-of-service on the target network.
  C. It uses a network of bots to overwhelm a target network.
  D. It originates from a single source.
  C. It uses a network of bots to overwhelm a target network.

  ---

  Explanation/Reference:

• Question 13:

  What are the two most prominent characteristics of the malware type rootkit? (Choose two.)

  A. It encrypts user data.
  B. It cannot be detected by antivirus because of its masking techniques.
  C. It takes control of the operating system.
  D. It steals personal information.
  B. It cannot be detected by antivirus because of its masking techniques.
  C. It takes control of the operating system.

  ---

  Explanation/Reference:

• Question 14:

  What is the key to "taking down" a botnet?

  A. prevent bots from communicating with the C2
  B. install openvas software on endpoints
  C. use LDAP as a directory service
  D. block Docker engine software on endpoints
  A. prevent bots from communicating with the C2

• Question 15:

  Which two statements are true about servers in a demilitarized zone (DMZ)? (Choose two.)

  A. They can be accessed by traffic from the internet.
  B. They are located in the internal network.
  C. They can expose servers in the internal network to attacks.
  D. They are isolated from the internal network.
  A. They can be accessed by traffic from the internet.
  D. They are isolated from the internal network.

  ---

  Explanation/Reference:

• Question 16:

  DRAG DROP

  Match the attack definition to the type of security method used to protect against the attack.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 17:

  Which type of IDS/IPS uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt?

  A. Knowledge-based
  B. Signature-based
  C. Behavior-based
  D. Database-based
  C. Behavior-based

  ---

  Explanation/Reference:

  IDSs and IPSs also can be classified as knowledge-based (or signature-based) or behavior-based (or statistical anomaly-based) systems: A knowledge-based system uses a database of known vulnerabilities and attack profiles to identify intrusion attempts. These types of systems have lower false-alarm rates than behavior-based systems but must be continually updated with new attack signatures to be effective. A behavior-based system uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt. These types of systems are more adaptive than knowledge-based systems and therefore may be more effective in detecting previously unknown vulnerabilities and attacks, but they have a much higher false-positive rate than knowledge- based systems

• Question 18:

  Anthem server breaches disclosed Personally Identifiable Information (PII) from a number of its servers. The infiltration by hackers was attributed to which type of vulnerability?

  A. an intranet-accessed contractor's system that was compromised
  B. exploitation of an unpatched security vulnerability
  C. access by using a third-party vendor's password
  D. a phishing scheme that captured a database administrator's password
  D. a phishing scheme that captured a database administrator's password

• Question 19:

  Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next- generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages?

  A. Threat Prevention
  B. DNS Security
  C. WildFire
  D. URL Filtering
  D. URL Filtering

  ---

  Explanation/Reference:

  The URL Filtering service complements App-ID by enabling you to configure the next- generation firewall to identify and control access to websites and to protect your organization from websites that host malware and phishing pages.

• Question 20:

  A user is given access to a service that gives them access to cloud-hosted physical and virtual servers, storage, and networking. Which NIST cloud service model is this?

  A. IaaS
  B. SaaS
  C. PaaS
  D. CaaS
  A. IaaS

  ---

  Explanation/Reference: