Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 51:

  Which option is a Prisma Access security service?

  A. Compute Security
  B. Firewall as a Service (FWaaS)
  C. Virtual Private Networks (VPNs)
  D. Software-defined wide-area networks (SD-WANs)
  B. Firewall as a Service (FWaaS)

  ---

  Explanation/Reference:

  Prisma Access provides firewall as a service (FWaaS) that protects branch offices from threats while also providing the security services expected from a next- generation firewall. The full spectrum of FWaaS includes threat prevention, URL filtering, sandboxing, and more.

• Question 52:

  Which capability of the network-as-a-service layer uses the philosophy of “never trust, always verify”?

  A. Zero Trust network access (ZTNA)
  B. Software-defined wide area network (SD-WAN)
  C. Quality of service (QoS)
  D. Virtual private network (VPN)
  A. Zero Trust network access (ZTNA)

  ---

  Explanation/Reference:

  Reference: https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture#:~:text=Rooted%20in%20the%20principle%20of,%2C%20and%20simplifying%20granular%2C%20%E2%80%9Cleast

• Question 53:

  Which of the following is a Routed Protocol?

  A. Routing Information Protocol (RIP)
  B. Transmission Control Protocol (TCP)
  C. Internet Protocol (IP)
  D. Domain Name Service (DNS)
  A. Routing Information Protocol (RIP)

  ---

  Explanation/Reference:

• Question 54:

  Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) fall under which Prisma access service layer?

  A. Network
  B. Management
  C. Cloud
  D. Security
  D. Security

  ---

  Explanation/Reference:

  A SASE solution converges networking and security services into one unified, cloud-delivered solution (see Figure 3-12) that includes the following:

  Networking

  Software-defined wide-area networks (SD-WANs)

  Virtual private networks (VPNs)

  Zero Trust network access (ZTNA)

  Quality of Service (QoS)

  Security

  Firewall as a service (FWaaS)

  Domain Name System (DNS) security

  Threat prevention

  Secure web gateway (SWG)

  Data loss prevention (DLP)

  Cloud access security broker (CASB)

• Question 55:

  Which tool supercharges security operations center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security?

  A. Prisma SAAS
  B. WildFire
  C. Cortex XDR
  D. Cortex XSOAR
  D. Cortex XSOAR

  ---

  Explanation/Reference:

  Cortex XSOAR enhances Security Operations Center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security. Cortex XSOAR unifies case management, automation, real-time collaboration, and native threat intel management in the industry's first extended security orchestration, automation, and response (SOAR) offering.

• Question 56:

  Which network firewall operates up to Layer 4 (Transport layer) of the OSI model and maintains information about the communication sessions which have been established between hosts on trusted and untrusted networks?

  A. Group policy
  B. Stateless
  C. Stateful
  D. Static packet-filter
  C. Stateful

  ---

  Explanation/Reference:

  Stateful packet inspection firewalls Second-generation stateful packet inspection (also known as dynamic packet filtering) firewalls have the following characteristics: They operate up to Layer 4 (Transport layer) of the OSI model and maintain state information about the communication sessions that have been established between hosts on the trusted and untrusted networks. They inspect individual packet headers to determine source and destination IP address, protocol (TCP, UDP, and ICMP), and port number (during session establishment only) to determine whether the session should be allowed, blocked, or dropped based on configured firewall rules. After a permitted connection is established between two hosts, the firewall creates and deletes firewall rules for individual connections as needed, thus effectively creating a tunnel that allows traffic to flow between the two hosts without further inspection of individual packets during the session. This type of firewall is very fast, but it is port-based and it is highly dependent on the trustworthiness of the two hosts because individual packets aren't inspected after the connection is established.

• Question 57:

  On which security principle does virtualization have positive effects?

  A. integrity
  B. confidentiality
  C. availability
  D. non-repudiation
  C. availability

  ---

  Explanation/Reference:

• Question 58:

  DRAG DROP

  Match the DNS record type to its function within DNS.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  The basic DNS record types are as follows: A (IPv4) or AAAA (IPv6) (Address): Maps a domain or subdomain to an IP address or multiple IP addresses CNAME (Canonical Name): Maps a domain or subdomain to another hostname MX (Mail Exchanger): Specifies the hostname or hostnames of email servers for a domain PTR (Pointer): Points to a CNAME; commonly used for reverse DNS lookups that map an IP address to a host in a domain or subdomain SOA (Start of Authority): Specifies authoritative information about a DNS zone such as primary name server, email address of the domain administrator, and domain serial number NS (Name Server): The NS record specifies aan authoritative name server for a given host. TXT (Text): Stores text-based information

• Question 59:

  Which element of the security operations process is concerned with using external functions to help achieve goals?

  A. interfaces
  B. business
  C. technology
  D. people
  A. interfaces

  ---

  Explanation/Reference:

  The six pillars include:

  1.

  Business (goals and outcomes)

  2.

  People (who will perform the work)

  3.

  Interfaces (external functions to help achieve goals)

  4.

  Visibility (information needed to accomplish goals)

  5.

  Technology (capabilities needed to provide visibility and enable people)

  6.

  Processes (tactical steps required to execute on goals)

• Question 60:

  You have been invited to a public cloud design and architecture session to help deliver secure east west flows and secure Kubernetes workloads.

  What deployment options do you have available? (Choose two.)

  A. PA-Series
  B. VM-Series
  C. Panorama
  D. CN-Series
  A. PA-Series
  B. VM-Series

  ---

  Explanation/Reference: