Palo Alto Networks Palo Alto Networks Certifications PCCET Questions & Answers

• Question 61:

  Which option is a Prisma Access security service?

  A. Compute Security

  B. Firewall as a Service (FWaaS)

  C. Virtual Private Networks (VPNs)

  D. Software-defined wide-area networks (SD-WANs)

  Correct Answer: B

  Prisma Access provides firewall as a service (FWaaS) that protects branch offices from threats while also providing the security services expected from a next- generation firewall. The full spectrum of FWaaS includes threat prevention, URL filtering, sandboxing, and more.

• Question 62:

  What are two key characteristics of a Type 1 hypervisor? (Choose two.)

  A. is hardened against cyber attacks

  B. runs without any vulnerability issues

  C. runs within an operating system

  D. allows multiple, virtual (or guest) operating systems to run concurrently on a single physical host computer

  Correct Answer: CD

• Question 63:

  Which pillar of Prisma Cloud application security does vulnerability management fall under?

  A. dynamic computing

  B. identity security

  C. compute security

  D. network protection

  Correct Answer: C

  Prisma Cloud comprises four pillars: Visibility, governance, and compliance. Gain deep visibility into the security posture of multicloud environments. Track everything that gets deployed with an automated asset inventory, and maintain compliance with out-of-the-box governance policies that enforce good behavior across your environments. Compute security. Secure hosts, containers, and serverless workloads throughout the application lifecycle. Detect and prevent risks by integrating vulnerability intelligence into your integrated development environment (IDE), software configuration management (SCM), and CI/CD workflows. Enforce machine learning-based runtime protection to protect applications and workloads in real time. Network protection. Continuously monitor network activity for anomalous behavior, enforce microservice- aware micro-segmentation, and implement industry-leading firewall protection. Protect the network perimeter and the connectivity between containers and hosts. Identity security. Monitor and leverage user and entity behavior analytics (UEBA) across your environments to detect and block malicious actions. Gain visibility into and enforce governance p

• Question 64:

  Which pillar of Prisma Cloud application security addresses ensuring that your cloud resources and SaaS applications are correctly configured?

  A. visibility, governance, and compliance

  B. network protection

  C. dynamic computing

  D. compute security

  Correct Answer: A

  Ensuring that your cloud resources and SaaS applications are correctly configured and adhere to your organization's security standards from day one is essential to prevent successful attacks. Also, making sure that these applications, and the data they collect and store, are properly protected and compliant is critical to avoid costly fines, a tarnished image, and loss of customer trust. Meeting security standards and maintaining compliant environments at scale, and across SaaS applications, is the new expectation for security teams.

• Question 65:

  SecOps consists of interfaces, visibility, technology, and which other three elements? (Choose three.)

  A. People

  B. Accessibility

  C. Processes

  D. Understanding

  E. Business

  Correct Answer: ACE

  The six pillars include:

  1.

  Business (goals and outcomes)

  2.

  People (who will perform the work)

  3.

  Interfaces (external functions to help achieve goals)

  4.

  Visibility (information needed to accomplish goals)

  5.

  Technology (capabilities needed to provide visibility and enable people)

  6.

  Processes (tactical steps required to execute on goals) All elements must tie back to the business itself and the goals of the security operations

• Question 66:

  Which two network resources does a directory service database contain? (Choose two.)

  A. Services

  B. /etc/shadow files

  C. Users

  D. Terminal shell types on endpoints

  Correct Answer: AC

  A directory service is a database that contains information about users, resources, and services in a network.

• Question 67:

  Which type of Software as a Service (SaaS) application provides business benefits, is fast to deploy, requires minimal cost and is infinitely scalable?

  A. Benign

  B. Tolerated

  C. Sanctioned

  D. Secure

  Correct Answer: C

• Question 68:

  In SecOps, what are two of the components included in the identify stage? (Choose two.)

  A. Initial Research

  B. Change Control

  C. Content Engineering

  D. Breach Response

  Correct Answer: AC

• Question 69:

  Which security component should you configure to block viruses not seen and blocked by the perimeter firewall?

  A. endpoint antivirus software

  B. strong endpoint passwords

  C. endpoint disk encryption

  D. endpoint NIC ACLs

  Correct Answer: A

• Question 70:

  Which key component is used to configure a static route?

  A. router ID

  B. enable setting

  C. routing protocol

  D. next hop IP address

  Correct Answer: D