PCCSA – Modules | 100% Correct Answers | Verified | Latest 2024 Version

A Zero Trust network security model is based on which security principle? - Least privilege Which capability of a Zero-Trust segmentation platform uses a combination of anti-malware, intrusion prevention, and cyberthreat prevention technologies to provide comprehensive protection against both known and unknown threats, including threats on mobile devices? - Cyberthreat protection True or False: The primary issue with a perimeter-based network security strategy in which countermeasures are deployed at a handful of well-defined ingress and egress points to the network is that it relies on the assumption that everything on the internal network can be trusted. - True Which of the following is not a benefit of implementing a Zero-Trust network? - Higher total cost of ownership (TCO) with a consolidated and fully integrated security operating platform. True or False: The principle of least privilege in network security requires that only the permission or access rights necessary to perform an authorized task is denied. - False True or False: The single pass architecture of the NGFW integrates multiple threat prevention disciplines (PIS, anti-malware, URL filtering, etc.) into a single stream-based engine with a uniform signature format. - True Which application identification technique determines whether the initially detected application protocol is the "real one" or if it is being used as a tunnel to hide the actual application (for example, Tor might run inside HTTPS). - Application protocol decoding On the NGFW, which type of User-ID technique can be configured to probe Microsoft Windows servers for active network sessions of a u