Palo Alto Networks PCCSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCCSA Online Questions & Answers

• Question 1:

  Which type of SaaS application is allowed and provided by an IT department?

  A. tolerated
  B. certified
  C. sanctioned
  D. unsanctioned
  C. sanctioned

• Question 2:

  Assume that it is your responsibility to secure the software functioning at top five layers in the exhibit. Which cloud service model type is represented?

  

  A. software as a service
  B. platform as a service
  C. infrastructure as a service
  D. on-premises
  C. infrastructure as a service

• Question 3:

  Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

  A. stateless firewall
  B. next-generation firewall
  C. personal endpoint firewall
  D. port-based firewall
  B. next-generation firewall

• Question 4:

  Palo Alto Networks Traps is natively integrated with which Palo Alto Networks offering to protect against unknown exploits and malware threats?

  A. MineMeld
  B. WildFire
  C. Content-ID
  D. AutoFocus
  D. AutoFocus

• Question 5:

  On an endpoint, which method should you use to secure applications against exploits?

  A. full-disk encryption
  B. strong user passwords
  C. software patches
  D. endpoint-based firewall
  D. endpoint-based firewall

• Question 6:

  Which type of adversary would execute a website defacement attack to promote a political agenda?

  A. script kiddie
  B. hacktivist
  C. gray hat hacker
  D. state sponsored hacker
  B. hacktivist

• Question 7:

  In PKI, which item is issued by a CA?

  A. digital certificate
  B. SSH key
  C. KDC ticket
  D. shared key
  A. digital certificate

• Question 8:

  Which component of a digital certificate provides authentication of the certificate's issuer?

  A. digital signature
  B. certificate revocation list
  C. issuer's private key
  D. certificate's expiration date
  A. digital signature

• Question 9:

  What is an effective defense against a denial-of-service attack?

  A. deploy a firewall to reject suspect network packets
  B. flood the DoS source with ICMP echo requests to reduce attack output
  C. contact the upstream ISP and disconnect affected network interfaces
  D. configure additional network interfaces for legitimate network traffic
  C. contact the upstream ISP and disconnect affected network interfaces

• Question 10:

  Which type of cloud computing deployment is available to any person or organization who can pay the usage fees?

  A. public
  B. hybrid
  C. private
  D. local
  A. public