Palo Alto Networks PCCSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCCSA Online Questions & Answers

• Question 71:

  Company policy allows employees to access the internet. While searching for office supplies on the internet, a corporate user mistypes a URL, connects to a malicious website, and unknowingly downloads malware.

  Which action should have been taken to prevent the malware download but still allow user access to the internet?

  A. deploy a firewall with content filtering capabilities on the corporate perimeter
  B. allow only encrypted HTTPS access to the internet
  C. configure digital certificates for all users to authenticate internet downloads
  D. permit web connections only to TCP port 443
  A. deploy a firewall with content filtering capabilities on the corporate perimeter

• Question 72:

  What method can be used to guarantee that a document originates from you and no one else?

  A. public key encryption, encrypting the document with the private key and making the public key available to others
  B. symmetric encryption, ecnrypting the document with the secret key and making a different secret key available to others
  C. symmetric encryption, ecnrypting the document with the secret key and making the same secret kay available to others
  D. public key encryption, encrypting the document with the private key and making the private key available to others
  A. public key encryption, encrypting the document with the private key and making the public key available to others

• Question 73:

  Which type of cloud computing deployment makes resources exclusively available to members of a single organization?

  A. local
  B. private
  C. hybrid
  D. public
  B. private

• Question 74:

  DRAG DROP

  Match each option with the term it describes.

  Select and Place:

  

  

• Question 75:

  Identify a weakness of a perimeter-based network security strategy to protect an organization's endpoint systems.

  A. It cannot identify command-and-control traffic.
  B. It cannot monitor all potential network ports.
  C. It assumes that all internal devices are untrusted.
  D. It assumes that every internal endpoint can be trusted.
  D. It assumes that every internal endpoint can be trusted.

• Question 76:

  You discover malware has corrupted the BIOS on your laptop. Which type of malware is this?

  A. bootkit
  B. exploit
  C. rootkit
  D. vulnerability
  A. bootkit

• Question 77:

  On an endpoint, which method should you use to secure applications against exploits?

  A. full-disk encryption
  B. strong user passwords
  C. software patches
  D. endpoint-based firewall
  D. endpoint-based firewall

• Question 78:

  DRAG DROP

  Match each cryptographic method with its description.

  Select and Place:

  

  

• Question 79:

  DRAG DROP

  Match the network infrastructure item with its corresponding description.

  Select and Place: