Palo Alto Networks Palo Alto Networks Certifications PCCET Questions & Answers

• Question 51:

  How does Prisma SaaS provide protection for Sanctioned SaaS applications?

  A. Prisma SaaS connects to an organizations internal print and file sharing services to provide protection and sharing visibility

  B. Prisma SaaS does not provide protection for Sanctioned SaaS applications because they are secure

  C. Prisma access uses Uniform Resource Locator (URL) Web categorization to provide protection and sharing visibility D. Prisma SaaS connects directly to sanctioned external service providers SaaS application service to provide protection and sharing visibility

  Correct Answer: D

  Prisma SaaS connects directly to the applications themselves, therefore providing continuous silent monitoring of the risks within the sanctioned SaaS applications, with detailed visibility that is not possible with traditional security solutions.

• Question 52:

  Which type of malware takes advantage of a vulnerability on an endpoint or server?

  A. technique

  B. patch

  C. vulnerability

  D. exploit

  Correct Answer: A

• Question 53:

  In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly identified as malicious traffic?

  A. False-positive

  B. True-negative

  C. False-negative

  D. True-positive

  Correct Answer: A

  In anti-malware, a false positive incorrectly identifies a legitimate file or application as malware. A false negative incorrectly identifies malware as a legitimate file or application. In intrusion detection, a false positive incorrectly identifies legitimate traffic as a threat, and a false negative incorrectly identifies a threat as legitimate traffic.

• Question 54:

  Under which category does an application that is approved by the IT department, such as Office 365, fall?

  A. unsanctioned

  B. prohibited

  C. tolerated

  D. sanctioned

  Correct Answer: D

• Question 55:

  Which item accurately describes a security weakness that is caused by implementing a "ports first" data security solution in a traditional data center?

  A. You may have to use port numbers greater than 1024 for your business-critical applications.

  B. You may have to open up multiple ports and these ports could also be used to gain unauthorized entry into your datacenter.

  C. You may not be able to assign the correct port to your business-critical applications.

  D. You may not be able to open up enough ports for your business-critical applications which will increase the attack surface area.

  Correct Answer: B

• Question 56:

  Why is it important to protect East-West traffic within a private cloud?

  A. All traffic contains threats, so enterprises must protect against threats across the entire network

  B. East-West traffic contains more session-oriented traffic than other traffic

  C. East-West traffic contains more threats than other traffic

  D. East-West traffic uses IPv6 which is less secure than IPv4

  Correct Answer: A

• Question 57:

  Which IPsec feature allows device traffic to go directly to the Internet?

  A. Split tunneling

  B. Diffie-Hellman groups

  C. d.Authentication Header (AH)

  D. IKE Security Association

  Correct Answer: A

  "Or split tunneling can be configured to allow internet traffic from the device to go directly to the internet, while other specific types of traffic route through the IPsec tunnel, for acceptable protection with much less performance degradation."

• Question 58:

  Which endpoint tool or agent can enact behavior-based protection?

  A. AutoFocus

  B. Cortex XDR

  C. DNS Security

  D. MineMeld

  Correct Answer: B

• Question 59:

  In which situation would a dynamic routing protocol be the quickest way to configure routes on a router?

  A. the network is large

  B. the network is small

  C. the network has low bandwidth requirements

  D. the network needs backup routes

  Correct Answer: A

  A static routing protocol requires that routes be created and updated manually on a router or other network device. If a static route is down, traffic can't be automatically rerouted unless an alternate route has been configured. Also, if the route is congested, traffic can't be automatically rerouted over the less congested alternate route. Static routing is practical only in very small networks or for very limited, special-case routing scenarios (for example, a destination that's used as a backup route or is reachable only via a single router). However, static routing has low bandwidth requirements (routing information isn't broadcast across the network) and some built-in security (users can route only to destinations that are specified in statically defined routes).

• Question 60:

  Which subnet does the host 192.168.19.36/27 belong?

  A. 192.168.19.0

  B. 192.168.19.16

  C. 192.168.19.64

  D. 192.168.19.32

  Correct Answer: D