Palo Alto Networks Palo Alto Networks Certifications PCCET Questions & Answers

• Question 81:

  Which type of LAN technology is being displayed in the diagram?

  

  A. Star Topology

  B. Spine Leaf Topology

  C. Mesh Topology

  D. Bus Topology

  Correct Answer: A

• Question 82:

  Which organizational function is responsible for security automation and eventual vetting of the solution to help ensure consistency through machine-driven responses to security issues?

  A. NetOps

  B. SecOps

  C. SecDevOps

  D. DevOps

  Correct Answer: B

  Security operations (SecOps) is a necessary function for protecting the digital way of life, for global businesses and customers. SecOps requires continuous improvement in operations to handle fast- evolving threats. SecOps needs to arm security operations professionals with high-fidelity intelligence, contextual data, and automated prevention workflows to quickly identify and respond to these threats. SecOps must leverage automation to reduce strain on analysts and execute the Security Operation Center's (SOC) mission to identify, investigate, and mitigate threats.

• Question 83:

  Which model would a customer choose if they want full control over the operating system(s) running on their cloud computing platform?

  A. SaaS

  B. DaaS

  C. PaaS

  D. IaaS

  Correct Answer: D

• Question 84:

  What is the key to "taking down" a botnet?

  A. prevent bots from communicating with the C2

  B. install openvas software on endpoints

  C. use LDAP as a directory service

  D. block Docker engine software on endpoints

  Correct Answer: A

• Question 85:

  During the OSI layer 3 step of the encapsulation process, what is the Protocol Data Unit (PDU) called when the IP stack adds source (sender) and destination (receiver) IP addresses?

  A. Frame

  B. Segment

  C. Packet

  D. Data

  Correct Answer: C

  The IP stack adds source (sender) and destination (receiver) IP addresses to the TCP segment (which now is called an IP packet) and notifies the server operating system that it has an outgoing message ready to be sent across the network.

• Question 86:

  Which Palo Alto Networks product provides playbooks with 300+ multivendor integrations that help solve any security use case?

  A. Cortex XSOAR

  B. Prisma Cloud

  C. AutoFocus

  D. Cortex XDR

  Correct Answer: A

  SOAR tools ingest aggregated alerts from detection sources (such as SIEMs, network security tools, and mailboxes) before executing automatable, process- driven playbooks to enrich and respond to these alerts. https:// www.paloaltonetworks.com/cortex/security-operations-automation

• Question 87:

  Which aspect of a SaaS application requires compliance with local organizational security policies?

  A. Types of physical storage media used

  B. Data-at-rest encryption standards

  C. Acceptable use of the SaaS application

  D. Vulnerability scanning and management

  Correct Answer: C

• Question 88:

  From which resource does Palo Alto Networks AutoFocus correlate and gain URL filtering intelligence?

  A. Unit 52

  B. PAN-DB

  C. BrightCloud

  D. MineMeld

  Correct Answer: B

  When you enable URL Filtering, all web traffic is compared against the URL Filtering database, PAN-DB, which contains millions of URLs that have been grouped into about 65 categories.

• Question 89:

  In addition to local analysis, what can send unknown files to WildFire for discovery and deeper analysis to rapidly detect potentially unknown malware?

  A. Cortex XDR

  B. AutoFocus

  C. MineMild

  D. Cortex XSOAR

  Correct Answer: A

  In addition to local analysis, Cortex XDR can send unknown files to WildFire for discovery and deeper analysis to rapidly detect.

• Question 90:

  Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?

  A. XDR

  B. STEP

  C. SOAR

  D. SIEM

  Correct Answer: C