Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 191:

  What are three capabilities of mobile device management? (Choose three.)

  A. Exploit protection
  B. Advanced data loss prevention
  C. Remote erase/wipe
  D. Container-based endpoint protection
  E. Malware protection
  A. Exploit protection
  C. Remote erase/wipe
  E. Malware protection

  ---

  Explanation/Reference:

• Question 192:

  Which product from Palo Alto Networks enables organizations to prevent successful cyberattacks as well as simplify and strengthen security processes?

  A. Expedition
  B. AutoFocus
  C. MineMeld
  D. Cortex XDR
  D. Cortex XDR

  ---

  Explanation/Reference:

  From a business perspective, XDR platforms enable organizations to prevent successful cyberattacks as well as simplify and strengthen security processes.

• Question 193:

  In the network diagram below, which device is the router?

  

  A. A
  B. C
  C. D
  D. B
  A. A

  ---

  Explanation/Reference:

• Question 194:

  DRAG DROP

  Match the Identity and Access Management (IAM) security control with the appropriate definition.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 195:

  Which classification of IDS/IPS uses a database of known vulnerabilities and attack profiles to identify intrusion attempts?

  A. Statistical-based
  B. Knowledge-based
  C. Behavior-based
  D. Anomaly-based
  B. Knowledge-based

  ---

  Explanation/Reference:

  A knowledge-based system uses a database of known vulnerabilities and attack profiles to identify intrusion attempts. These types of systems have lower false-alarm rates than behavior-based systems but must be continually updated with new attack signatures to be effective. A behavior-based system uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt. These types of systems are more adaptive than knowledge-based systems and therefore may be more effective in detecting previously unknown vulnerabilities and attacks, but they have a much higher false-positive rate than knowledge- based systems.

• Question 196:

  DRAG DROP

  Given the graphic, match each stage of the cyber-attack lifecycle to its description.

  

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 197:

  Which of the following is a CI/CD platform?

  A. Github
  B. Jira
  C. Atom.io
  D. Jenkins
  D. Jenkins

  ---

  Explanation/Reference:

• Question 198:

  Which of the following is an AWS serverless service?

  A. Beta
  B. Kappa
  C. Delta
  D. Lambda
  D. Lambda

  ---

  Explanation/Reference:

  Examples of serverless environments include Amazon Lambda and Azure Functions. Many PaaS offerings, such as Pivotal Cloud Foundry, also are effectively serverless even if they have not historically been marketed as such. Although serverless may appear to lack the container-specific, cloud native attribute, containers are extensively used in the underlying implementations, even if those implementations are not exposed to end users directly.

• Question 199:

  What is the purpose of SIEM?

  A. Securing cloud-based applications
  B. Automating the security team's incident response
  C. Real-time monitoring and analysis of security events
  D. Filtering webpages employees are allowed to access
  C. Real-time monitoring and analysis of security events

  ---

  Explanation/Reference:

  Reference: https://www.gartner.com/en/information-technology/glossary/security-information-and-event-management-siem#:~:text=Security%20information%20and%20event%20management%20(SIEM)%20technology%20supports% 20threat%20detection,event%20and%20contextual%20data%20sources

• Question 200:

  Which Palo Alto Networks tools enable a proactive, prevention-based approach to network automation that accelerates security analysis?

  A. MineMeld
  B. AutoFocus
  C. WildFire
  D. Cortex XDR
  B. AutoFocus

  ---

  Explanation/Reference:

  "Palo Alto Networks AutoFocus enables a proactive, prevention-based approach to network security that puts automation to work for security professionals. Threat intelligence from the service is made directly accessible in the Palo Alto Networks platform, including PAN-OS software and Panorama. AutoFocus speeds the security team's existing workflows, which allows for in-depth investigation into suspicious activity, without additional specialized resources."