Palo Alto Networks Palo Alto Networks Certifications PCCSA Questions & Answers

• Question 11:

  Which network security architecture feature is designed to purposely expose some of an organization's services to untrusted networks?

  A. network zone

  B. security zone

  C. demilitarized zone

  D. military zone

  Correct Answer: C

• Question 12:

  Which action must be taken prior to a successful ransomware attack to enable recovery from the attack?

  A. create a data snapshot on your IDS device

  B. back up all hosts that contain critical data

  C. update all firewall malware signatures

  D. limit external exposure of internal DNS resource records

  Correct Answer: B

• Question 13:

  Which type of cloud computing service provides access to email and word processing applications running in a cloud infrastructure?

  A. software as a service

  B. computing as a service

  C. platform as a service

  D. infrastructure as a service

  Correct Answer: A

• Question 14:

  What is the result of deploying virtualization in your data center?

  A. reduced security threat

  B. reduced operational costs

  C. increased hardware capital costs

  D. increased host provisioning

  Correct Answer: B

• Question 15:

  Which two remote access methods are secure because they encrypt traffic? (Choose two.)

  A. IPsec-AH

  B. SSH

  C. VPN

  D. Telnet

  E. rlogin

  Correct Answer: BC

• Question 16:

  Which option describes a characteristic of a next-generation firewall but not a UTM device?

  A. Content inspection engines operate in individual silos.

  B. Content inspection engines use tightly integrated operation.

  C. Content inspection engines process traffic serially, not in parallel.

  D. Content inspection engines run on the same hardware and memory resources.

  Correct Answer: B

• Question 17:

  Which Palo Alto Networks technology safely enables business use of mobile devices by providing a unique solution to manage the device, protect the device, and control the data?

  A. AutoFocus

  B. WildFire

  C. GlobalProtect

  D. Traps

  Correct Answer: C

  Reference: http://www.paloguard.com/datasheets/globalprotect.pdf

• Question 18:

  Which capability is required for a next-generation firewall to protect your network against malware threats?

  A. can access/read Windows and Linux file systems

  B. can scan all endpoint devices

  C. can interpret file permissions

  D. can perform SSL decryption

  Correct Answer: D

• Question 19:

  How does machine learning enhance WildFire operation?

  A. analyzes file sample characteristics during static analysis

  B. determines which file samples should be forwarded to WildFire

  C. determines the optimum OS WildFire uses to analyze file samples

  D. analyzes file sample characteristics during dynamic analysis

  Correct Answer: D

• Question 20:

  Palo Alto Networks App-ID uses information from which source to help identify an application in network traffic?

  A. PAN-DB URL database

  B. traffic behavioral analysis

  C. source port in packet header

  D. destination IP address in packet header

  Correct Answer: B