Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 31:

  What is an example of a Web 3.0 application?

  A. Github
  B. Bitcoin
  C. Pinterest
  D. Facebook
  A. Github

  ---

  Explanation/Reference:

• Question 32:

  Network isolation can be achieved using what kind of logical network attribute?

  A. Untrust Zone
  B. Wide Area Network (WAN)
  C. Virtual LAN (VLAN)
  D. Trust Zone
  C. Virtual LAN (VLAN)

  ---

  Explanation/Reference:

  Reference: https://www.sciencedirect.com/topics/computer-science/logical-isolation#:~:text=VLAN%20provides%20logical%20isolation%20between,2%20by%20creating%20virtual%20networks

• Question 33:

  Which option would be an example of PII that you need to prevent from leaving your enterprise network?

  A. Credit card number
  B. Trade secret
  C. National security information
  D. A symmetric encryption key
  A. Credit card number

• Question 34:

  In the Transport layer of the OSI model, what is a protocol data unit (PDU) called?

  A. Frame
  B. Packet
  C. Datagram
  D. Bit
  B. Packet

  ---

  Explanation/Reference:

• Question 35:

  Which TCP/IP sub-protocol operates at Layer4 of the OSI model?

  A. HTTPS
  B. FTP
  C. UDP
  D. SSH
  C. UDP

  ---

  Explanation/Reference:

• Question 36:

  What is the definition of a zero-day threat?

  A. The amount of time it takes to discover a vulnerability and release a security fix
  B. The period between the discovery of a vulnerability and development and release of a patch
  C. The day a software vendor becomes aware of an exploit and prevents any further hacking
  D. A specific day during which zero threats occurred
  B. The period between the discovery of a vulnerability and development and release of a patch

  ---

  Explanation/Reference:

  Reference: https://www.investopedia.com/terms/z/zero-day-attack.asp

• Question 37:

  Which Palo Alto Networks subscription dynamically discovers and maintains a real-time inventory of devices on your network?

  A. DNS Security
  B. Threat Prevention
  C. IoT Security
  D. Wildfire
  B. Threat Prevention

  ---

  Explanation/Reference:

• Question 38:

  Which analysis detonates previously unknown submissions in a custom-built, evasion- resistant virtual environment to determine real-world effects and behavior?

  A. Dynamic
  B. Pre-exploit protection
  C. Bare-metal
  D. Static
  A. Dynamic

  ---

  Explanation/Reference:

  The WildFire cloud-based malware analysis environment is a cyber threat prevention service that identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment.

• Question 39:

  What is a key advantage and key risk in using a public cloud environment?

  A. Multi-tenancy
  B. Dedicated Networks
  C. Dedicated Hosts
  D. Multiplexing
  A. Multi-tenancy

  ---

  Explanation/Reference:

  Multitenancy is a key characteristic of the public cloud, and an important risk. Although public cloud providers strive to ensure isolation between their various customers, the infrastructure and resources in the public cloud are shared. Inherent risks in a shared environment include misconfigurations, inadequate or ineffective processes and controls, and the "noisy neighbor" problem (excessive network traffic, disk I/ O, or processor use can negatively impact other customers sharing the same resource). In hybrid and multicloud environments that connect numerous public and/or private clouds, the delineation becomes blurred, complexity increases, and security risks become more challenging to address.

• Question 40:

  Which item accurately describes a security weakness that is caused by implementing a "ports first" data security solution in a traditional data center?

  A. You may have to use port numbers greater than 1024 for your business-critical applications.
  B. You may have to open up multiple ports and these ports could also be used to gain unauthorized entry into your datacenter.
  C. You may not be able to assign the correct port to your business-critical applications.
  D. You may not be able to open up enough ports for your business-critical applications which will increase the attack surface area.
  B. You may have to open up multiple ports and these ports could also be used to gain unauthorized entry into your datacenter.