Palo Alto Networks Certified Cybersecurity Associate PCCET Questions & Answers

• Question 31:

  Which statement describes DevOps?

  A. DevOps is its own separate team

  B. DevOps is a set of tools that assists the Development and Operations teams throughout the software delivery process

  C. DevOps is a combination of the Development and Operations teams

  D. DevOps is a culture that unites the Development and Operations teams throughout the software delivery process

  Correct Answer: D

  DevOps is not:

  A combination of the Dev and Ops teams: There still are two teams; they just operate in a communicative, collaborative way.

  Its own separate team: There is no such thing as a "DevOps engineer." Although some companies may appoint a "DevOps team" as a pilot when trying to transition to a DevOps culture, DevOps refers to a culture where developers, testers,

  and operations personnel cooperate throughout the entire software delivery lifecycle. A tool or set of tools: Although there are tools that work well with a DevOps model or help promote DevOps culture, DevOps ultimately is a strategy, not a

  tool. Automation: Although automation is very important for a DevOps culture, it alone does not define DevOps.

• Question 32:

  How does DevSecOps improve the Continuous Integration/Continuous Deployment (CI/CD) pipeline?

  A. DevSecOps improves pipeline security by assigning the security team as the lead team for continuous deployment

  B. DevSecOps ensures the pipeline has horizontal intersections for application code deployment

  C. DevSecOps unites the Security team with the Development and Operations teams to integrate security into the CI/CD pipeline

  D. DevSecOps does security checking after the application code has been processed through the CI/CD pipeline

  Correct Answer: C

  DevSecOps takes the concept behind DevOps that developers and IT teams should work together closely, instead of separately, throughout software delivery and extends it to include security and integrate automated checks into the full CI/ CD pipeline. The integration of the CI/CD pipeline takes care of the problem of security seeming like an outside force and instead allows developers to maintain their usual speed without compromising data security

• Question 33:

  An Administrator wants to maximize the use of a network address. The network is 192.168.6.0/24 and there are three subnets that need to be created that can not overlap. Which subnet would you use for the network with 120 hosts?

  Requirements for the three subnets:

  Subnet 1: 3 host addresses

  Subnet 2: 25 host addresses

  Subnet 3: 120 host addresses

  A. 192.168.6.168/30

  B. 192.168.6.0/25

  C. 192.168.6.160/29

  D. 192.168.6.128/27

  Correct Answer: B

• Question 34:

  What is used to orchestrate, coordinate, and control clusters of containers?

  A. Kubernetes

  B. Prisma Saas

  C. Docker

  D. CN-Series

  Correct Answer: A

  As containers grew in popularity and used diversified orchestrators such as Kubernetes (and its derivatives, such as OpenShift), Mesos, and Docker Swarm, it became increasingly important to deploy and operate containers at scale. https:// www.dynatrace.com/news/blog/kubernetes-vs-docker/

• Question 35:

  Which analysis detonates previously unknown submissions in a custom-built, evasion- resistant virtual environment to determine real-world effects and behavior?

  A. Dynamic

  B. Pre-exploit protection

  C. Bare-metal

  D. Static

  Correct Answer: A

  The WildFire cloud-based malware analysis environment is a cyber threat prevention service that identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment.

• Question 36:

  Which attacker profile uses the internet to recruit members to an ideology, to train them, and to spread fear and include panic?

  A. cybercriminals

  B. state-affiliated groups

  C. hacktivists

  D. cyberterrorists

  Correct Answer: D

• Question 37:

  Which endpoint product from Palo Alto Networks can help with SOC visibility?

  A. STIX

  B. Cortex XDR

  C. WildFire

  D. AutoFocus

  Correct Answer: B

  XDR solutions bring a proactive approach to threat detection and response. It delivers visibility across all data, including endpoint, network, and cloud data, while applying analytics and automation to address today's increasingly sophisticated threats. With XDR, cybersecurity teams can: Identify hidden, stealthy, and sophisticated threats proactively and quickly Track threats across any source or location within the organization Increase the productivity of the people operating the technology Get more out of their security investments Conclude investigations more efficiently

• Question 38:

  Which technique changes protocols at random during a session?

  A. use of non-standard ports

  B. port hopping

  C. hiding within SSL encryption

  D. tunneling within commonly used services

  Correct Answer: B

  Port hopping, in which ports and protocols are randomly changed during a session.

• Question 39:

  What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake?

  A. connectors and interfaces

  B. infrastructure and containers

  C. containers and developers

  D. data center and UPS

  Correct Answer: A

• Question 40:

  What is a key advantage and key risk in using a public cloud environment?

  A. Multi-tenancy

  B. Dedicated Networks

  C. Dedicated Hosts

  D. Multiplexing

  Correct Answer: A

  Multitenancy is a key characteristic of the public cloud, and an important risk. Although public cloud providers strive to ensure isolation between their various customers, the infrastructure and resources in the public cloud are shared. Inherent risks in a shared environment include misconfigurations, inadequate or ineffective processes and controls, and the "noisy neighbor" problem (excessive network traffic, disk I/ O, or processor use can negatively impact other customers sharing the same resource). In hybrid and multicloud environments that connect numerous public and/or private clouds, the delineation becomes blurred, complexity increases, and security risks become more challenging to address.