Palo Alto Networks PCCET Online Practice Questions and Exam Preparation

Palo Alto Networks PCCET Online Questions & Answers

• Question 71:

  Which type of firewall configuration should be deployed to protect north-south traffic?

  A. High-throughput appliance deployed as stand-alone
  B. Virtualized firewall deployed in stand-alone
  C. High-throughput appliance deployed in high availability
  D. Virtualized firewall deployed in high availability
  D. Virtualized firewall deployed in high availability

  ---

  Explanation/Reference:

• Question 72:

  Which type of malware replicates itself to spread rapidly through a computer network?

  A. ransomware
  B. Trojan horse
  C. virus
  D. worm
  D. worm

  ---

  Explanation/Reference:

  A worm replicates through the network while a virus replicates, not necessarily to spread through the network.

• Question 73:

  In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly identified as malicious traffic?

  A. False-positive
  B. True-negative
  C. False-negative
  D. True-positive
  A. False-positive

  ---

  Explanation/Reference:

  In anti-malware, a false positive incorrectly identifies a legitimate file or application as malware. A false negative incorrectly identifies malware as a legitimate file or application. In intrusion detection, a false positive incorrectly identifies legitimate traffic as a threat, and a false negative incorrectly identifies a threat as legitimate traffic.

• Question 74:

  Why is it important to protect East-West traffic within a private cloud?

  A. All traffic contains threats, so enterprises must protect against threats across the entire network
  B. East-West traffic contains more session-oriented traffic than other traffic
  C. East-West traffic contains more threats than other traffic
  D. East-West traffic uses IPv6 which is less secure than IPv4
  A. All traffic contains threats, so enterprises must protect against threats across the entire network

• Question 75:

  Which regulation is specifically mandated to payment account data security?

  A. GLBA
  B. PCI DSS
  C. EU GDPR
  D. SOX
  B. PCI DSS

  ---

  Explanation/Reference:

  Reference: https://www.controlcase.com/what-are-the-12-requirements-of-pci-dss-compliance/#:~:text=The%20Payment%20Card%20Industry%20Data,compliance%20must%20be%20validated%20annually

• Question 76:

  In which phase of the cyberattack lifecycle do attackers establish encrypted communication channels back to servers across the internet so that they can modify their attack objectives and methods?

  A. exploitation
  B. actions on the objective
  C. command and control
  D. installation
  C. command and control

  ---

  Explanation/Reference:

  Command and Control: Attackers establish encrypted communication channels back to command-and- control (C2) servers across the internet so that they can modify their attack objectives and methods as additional targets of opportunity are identified within the victim network, or to evade any new security countermeasures that the organization may attempt to deploy if attack artifacts are discovered.

• Question 77:

  DRAG DROP

  Match each tool to its capability.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 78:

  Which type of malware takes advantage of a vulnerability on an endpoint or server?

  A. technique
  B. patch
  C. vulnerability
  D. exploit
  A. technique

• Question 79:

  Which protocol is used by both internet service providers (ISPs) and network service providers (NSPs)?

  A. Routing Information Protocol (RIP)
  B. Border Gateway Protocol (BGP)
  C. Open Shortest Path First (OSPF)
  D. Split horizon
  B. Border Gateway Protocol (BGP)

  ---

  Explanation/Reference:

• Question 80:

  Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?

  A. XDR
  B. STEP
  C. SOAR
  D. SIEM
  C. SOAR