PA PCCET Questions and Answers 100% Pass

PA PCCET Questions and Answers 100% Pass Which organizational function is responsible for security automation and eventual vetting of the solution to help ensure consistency through machine-driven responses to security issues? SecOps On an endpoint, which method should you use to secure applications against exploits? endpoint-based firewall Which not-for-profit organization maintains the common vulnerability exposure catalog that is available through their public website? MITRE Which Palo Alto Networks tools enable a proactive, prevention-based approach to network automation that accelerates security analysis? AutoFocus Which endpoint product from Palo Alto Networks can help with SOC visibility? Cortex XDR Which technique changes protocols at random during a session? port hopping What is the primary security focus after consolidating data center hypervisor hosts within trust levels? control and protect inter-host traffic using physical network security appliances Which product from Palo Alto Networks extends the Security Operating Platform with the global threat intelligence and attack context needed to accelerate analysis, forensics, and hunting workflows? AutoFocus A tunneling protocol developed by Cisco Systems that can various network layer protocols inside point-to-point links. Generic Routing Encapsulation Supported by most OS and provides no encryption by itself. Layer 2 Tunneling Protocol A tunneling protocol that uses the Internet Key Exchange (IKE) to start a connection. Internet Protocol Security Primarily used for secure remote client VPN rather than for site-to-site VPN tunnels. Secure Socket Tunneling Protocol Which characteristic of serverless computing enables developers to quickly deploy application code? Uploading the application code itself, without having to provision a full container image or any OS virtual machine components Which key component is used to configure a static route? next hop IP address A native hypervisor runs: directly on the host computer's hardware Which Palo Alto Networks product provides playbooks with 300+ multivendor integrations that help solve any security use case? Cortex XSOAR Which activities do local organization security policies cover for a SaaS application? how the application can be used Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next-generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages? URL Filtering Which option would be an example of PII that you need to prevent from leaving your enterprise network? Credit card number Which network analysis tool can be used to record packet captures? Wireshark Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what? SOAR Which Palo Alto Networks tool is used to prevent endpoint systems from running malware executables such as viruses, trojans, and rootkits? Cortex XDR What does SIEM stand for? Security Information and Event Management a low-power, short range communication technology primarily designed for point-to-point communications between wireless devices in a hub-and-spoke technology Bluetooth (BLE) a wireless protocol defined by the Institute of Electrical and Electronics Engineers (IEEE) 802.11 a proprietary multicast wireless sensor network technology primarily used in personal wearables. Adaptive Network Technology (ANT+) a low-energy wireless mesh network protocol primarily used for home automation applications. Z-Wave Which option is an example of a North-South traffic flow? Client-server interactions that cross the edge perimeter Which aspect of a SaaS application requires compliance with local organizational security policies? Acceptable use of the SaaS application Which option describes the `selective network security virtualization` phase of incrementally transforming data centers? during the selective network security virtualization phase, all intra-host communication paths are strictly controlled Which TCP/IP sub-protocol operates at the Layer7 of the OSI model? SNMP Anthem server breaches disclosed Personally Identifiable Information (PII) from a number of its servers. The infiltration by hackers was attributed to which type of vulnerability? a phishing scheme that captured a database administrator's password Routing Information Protocol (RIP), uses what metric to determine how network traffic should flow? Hop Count Why is it important to protect East-West traffic within a private cloud? All traffic contains threats, so enterprises must protect against threats across the entire network Which IPsec feature allows device traffic to go directly to the Internet? Split tunneling Which attacker profile uses the internet to recruit members to an ideology, to train them, and to spread fear and include panic? cyberterrorists Which analysis detonates previously unknown submissions in a custom-built, evasion-resistant virtual environment to determine real-world effects and behavior? Dynamic What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake? connectors and interfaces Which type of Wi-Fi attack depends on the victim initiating the connection? Evil Twin Which term describes data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center? North-South traffic Ensuring least-privileged access to cloud resources and infrastructure: IAM Security Discovering threats by identifying activity that deviates from a normal baseline User Entity Behavior Analytics Securing and managing the relationships between users and cloud resources Access Management Decoupling workload identity from IP Address Machine Identity Delay between the discovery of vulnerability and development and release of a patch is: Zero day threat