Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 61:

  Which type of organization benefits most from the features SD-WAN offers?

  A. Businesses with one office and many remote employees
  B. Small businesses in a single location
  C. Large businesses with a single location
  D. Businesses with several branches
  A. Businesses with one office and many remote employees

  ---

  Explanation/Reference:

  Reference: https://www.techtarget.com/searchnetworking/answer/What-are-the-advantages-of-SD-WAN-adoption#:~:text=Financial%20services%20organizations%20with%20a,to%20SaaS%20and%20cloud%20applications

• Question 62:

  What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake?

  A. connectors and interfaces
  B. infrastructure and containers
  C. containers and developers
  D. data center and UPS
  A. connectors and interfaces

• Question 63:

  Based on how much is managed by the vendor, where can CaaS be situated in the spread of cloud computing services?

  A. between PaaS and FaaS
  B. between IaaS and PaaS
  C. between On-Prem and IaaS
  D. between FaaS and Serverless
  B. between IaaS and PaaS

  ---

  Explanation/Reference:

• Question 64:

  Which key component is used to configure a static route?

  A. router ID
  B. enable setting
  C. routing protocol
  D. next hop IP address
  D. next hop IP address

• Question 65:

  Which IPsec feature allows device traffic to go directly to the Internet?

  A. Split tunneling
  B. Diffie-Hellman groups
  C. d.Authentication Header (AH)
  D. IKE Security Association
  A. Split tunneling

  ---

  Explanation/Reference:

  "Or split tunneling can be configured to allow internet traffic from the device to go directly to the internet, while other specific types of traffic route through the IPsec tunnel, for acceptable protection with much less performance degradation."

• Question 66:

  Which type of Wi-Fi attack depends on the victim initiating the connection?

  A. Evil twin
  B. Jasager
  C. Parager
  D. Mirai
  A. Evil twin

  ---

  Explanation/Reference:

  Perhaps the easiest way for an attacker to find a victim to exploit is to set up a wireless access point that serves as a bridge to a real network. An attacker can inevitably bait a few victims with "free Wi-Fi access." The main problem with this approach is that it requires a potential victim to stumble on the access point and connect. The attacker can't easily target a specific victim, because the attack depends on the victim initiating the connection. https://www.paloaltonetworks.com/blog/2013/11/wireless-man-middle/

• Question 67:

  Which Palo Alto subscription service identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment?

  A. DNS Security
  B. URL Filtering
  C. WildFire
  D. Threat Prevention
  C. WildFire

  ---

  Explanation/Reference:

  "The WildFire cloud-based malware analysis environment is a cyber threat prevention service that identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment. WildFire automatically disseminates updated protections in near-real time to immediately prevent threats from spreading; this occurs without manual intervention"

• Question 68:

  In a traditional data center what is one result of sequential traffic analysis?

  A. simplifies security policy management
  B. reduces network latency
  C. causes security policies to be complex
  D. improves security policy application ID enforcement
  C. causes security policies to be complex

  ---

  Explanation/Reference:

  Multiple policies, no policy reconciliation tools: Sequential traffic analysis (stateful inspection, application control, intrusion prevention system (IPS), anti-malware, etc.) in traditional data center security solutions requires a corresponding security policy or profile, often using multiple management tools. The result is that your security policies become convoluted as you build and manage a firewall policy with source, destination, user, port, and action; an application control policy with similar rules; and any other threat prevention rules required. Multiple security policies that mix positive (firewall) and negative (application control, IPS, and anti-malware) control models can cause security holes by missing traffic and/or not identifying

• Question 69:

  What type of DNS record maps an IPV6 address to a domain or subdomain to another hostname?

  A. SOA
  B. NS
  C. AAAA
  D. MX
  C. AAAA

  ---

  Explanation/Reference:

  Reference: https://www.site24x7.com/learn/dns-record-types.html#:~:text=known%20spam%20sources.-,2.,it%20points%20to%20IPV6%20addresses

• Question 70:

  What differentiates knowledge-based systems from behavior-based systems?

  A. Behavior-based systems find the data that knowledge-based systems store.
  B. Knowledge-based systems pull from a previously stored database that distinguishes “bad”.
  C. Knowledge-based systems try to find new, distinct traits to find “bad” things.
  D. Behavior-based systems pull from a previously stored database that distinguishes “bad”.
  C. Knowledge-based systems try to find new, distinct traits to find “bad” things.

  ---

  Explanation/Reference: