Palo Alto Networks Certified Cybersecurity Associate PCCET Questions & Answers

• Question 21:

  Which Palo Alto subscription service identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment?

  A. DNS Security

  B. URL Filtering

  C. WildFire

  D. Threat Prevention

  Correct Answer: C

  "The WildFire cloud-based malware analysis environment is a cyber threat prevention service that identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment. WildFire automatically disseminates updated protections in near-real time to immediately prevent threats from spreading; this occurs without manual intervention"

• Question 22:

  What is the primary security focus after consolidating data center hypervisor hosts within trust levels?

  A. control and protect inter-host traffic using routers configured to use the Border Gateway Protocol (BGP) dynamic routing protocol

  B. control and protect inter-host traffic by exporting all your traffic logs to a sysvol log server using the User Datagram Protocol (UDP)

  C. control and protect inter-host traffic by using IPv4 addressing

  D. control and protect inter-host traffic using physical network security appliances

  Correct Answer: D

  page 211 "Consolidating servers within trust levels: Organizations often consolidate servers within the same trust level into a single virtual computing environment:

  ... ... ... This virtual systems capability enables a single physical device to be used to simultaneously meet the unique requirements of multiple VMs or groups of VMs. Control and protection of inter-host traffic with physical network security

  appliances that are properly positioned and configured is the primary security focus."

• Question 23:

  Routing Information Protocol (RIP), uses what metric to determine how network traffic should flow?

  A. Shortest Path

  B. Hop Count

  C. Split Horizon

  D. Path Vector

  Correct Answer: B

  Routing Information Protocol (RIP) is an example of a distance-vector routing protocol that uses hop count as its routing metric. To prevent routing loops, in which packets effectively get stuck bouncing between various router nodes, RIP implements a hop limit of 15, which limits the size of networks that RIP can support. After a data packet crosses 15 router nodes (hops) between a source and a destination, the destination is considered unreachable.

• Question 24:

  Which of the following is a service that allows you to control permissions assigned to users in order for them to access and utilize cloud resources?

  A. User-ID

  B. Lightweight Directory Access Protocol (LDAP)

  C. User and Entity Behavior Analytics (UEBA)

  D. Identity and Access Management (IAM)

  Correct Answer: D

  Identity and access management (IAM) is a software service or framework that allows organizations to define user or group identities within software environments, then associate permissions with them. The identities and permissions are usually spelled out in a text file, which is referred to as an IAM policy.

• Question 25:

  Which IoT connectivity technology is provided by satellites?

  A. 4G/LTE

  B. VLF

  C. L-band

  D. 2G/2.5G

  Correct Answer: C

  2G/2.5G: 2G connectivity remains a prevalent and viable IoT connectivity option due to the low cost of 2G modules, relatively long battery life, and large installed base of 2G sensors and M2M applications.

  3G: IoT devices with 3G modules use either Wideband Code Division Multiple Access (W-CDMA) or Evolved High Speed Packet Access (HSPA+ and Advanced HSPA+) to achieve data transfer rates of 384Kbps to 168Mbps. 4G/Long-Term

  Evolution (LTE): 4G/LTE networks enable real-time IoT use cases, such as autonomous vehicles, with 4G LTE Advanced Pro delivering speeds in excess of 3Gbps and less than 2 milliseconds of latency.

  5G: 5G cellular technology provides significant enhancements compared to 4G/LTE networks and is backed by ultra-low latency, massive connectivity and scalability for IoT devices, more efficient use of the licensed spectrum, and network

  slicing for application traffic prioritization.

• Question 26:

  Which classification of IDS/IPS uses a database of known vulnerabilities and attack profiles to identify intrusion attempts?

  A. Statistical-based

  B. Knowledge-based

  C. Behavior-based

  D. Anomaly-based

  Correct Answer: B

  A knowledge-based system uses a database of known vulnerabilities and attack profiles to identify intrusion attempts. These types of systems have lower false-alarm rates than behavior-based systems but must be continually updated with new attack signatures to be effective. A behavior-based system uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt. These types of systems are more adaptive than knowledge-based systems and therefore may be more effective in detecting previously unknown vulnerabilities and attacks, but they have a much higher false-positive rate than knowledge- based systems.

• Question 27:

  Which three services are part of Prisma SaaS? (Choose three.)

  A. Data Loss Prevention

  B. DevOps

  C. Denial of Service

  D. Data Exposure Control

  E. Threat Prevention

  Correct Answer: ADE

• Question 28:

  Which not-for-profit organization maintains the common vulnerability exposure catalog that is available through their public website?

  A. Department of Homeland Security

  B. MITRE

  C. Office of Cyber Security and Information Assurance

  D. Cybersecurity Vulnerability Research Center

  Correct Answer: B

• Question 29:

  Which type of Wi-Fi attack depends on the victim initiating the connection?

  A. Evil twin

  B. Jasager

  C. Parager

  D. Mirai

  Correct Answer: A

  Perhaps the easiest way for an attacker to find a victim to exploit is to set up a wireless access point that serves as a bridge to a real network. An attacker can inevitably bait a few victims with "free Wi-Fi access." The main problem with this approach is that it requires a potential victim to stumble on the access point and connect. The attacker can't easily target a specific victim, because the attack depends on the victim initiating the connection. https://www.paloaltonetworks.com/blog/2013/11/wireless-man-middle/

• Question 30:

  Which Palo Alto Networks tool is used to prevent endpoint systems from running malware executables such as viruses, trojans, and rootkits?

  A. Expedition

  B. Cortex XDR

  C. AutoFocus

  D. App-ID

  Correct Answer: B