PA PCCET STUDY GUIDE (STUDY
GUIDE FOR PALO ALTO PCCET) WITH
COMPLETE SOLUTIONS
True or False: Business intelligence (BI) software consists of tools and techniques used
to surface large amounts of raw unstructured data to perform a variety of tasks,
including data mining, event processing, and predictive analytics. - ANSWER-True
True or False: The process in which end users find personal technology and apps that
are more powerful or capable, more convenient, less expensive, quicker to install, and
easier to use than enterprise IT solutions is known as consumerization. - ANSWER-
True
Which action is associated with Web 1.0? - ANSWER-checking CNN's website for news
Which action is associated with Web 3.0? - ANSWER-asking Apple's Siri a question
Gmail is associated with which cloud computing model? - ANSWER-SaaS
Which two port numbers are associated with HTTP? (Choose two.) - ANSWER-80,
8080
Which port number is associated with HTTPS? - ANSWER-443
Which port is used for encrypted communication? - ANSWER-22
Which protocol distinguishes between applications using port numbers? - ANSWER-
TCP
How do attackers prevent port scans from being noticed by monitoring software? -
ANSWER-Scan ports so quickly it is finished before it can be detected and stopped
Which potentially risky attribute is the most serious? - ANSWER-Malware
Which one of these applications can be used as a tunnel for other applications? -
ANSWER-SSH
Which two devices or systems require the configuration of non-standard ports to be able
to use an application on a non-standard port? (Choose two.) - ANSWER-Client, Server
If you are responsible for the application's security, but not the operating system's
security, which cloud computing service model are you using? - ANSWER-PaaS
, Which stage of the cyberattack lifecycle involves querying public databases and testing
exploits in the attacker's internal network? - ANSWER-Weaponization and Delivery
Which step is involved in getting malware to run on the inside of the targeted
organization? - ANSWER-Exploitation and Installation
In which stage of the cyberattack lifecycle would you identify unusual communication
between an internal database that should not access the internet and an external
server? - ANSWER-Command and Control
Which two malware types are self-replicating? (Choose two.) - ANSWER-Virus, Worm
Which two malware types are likely to be left behind by a disgruntled employee?
(Choose two.) - ANSWER-Logic Bomb, Backdoor
Which kind of security always is the responsibility of the cloud customer? - ANSWER-
Data Security
Where is your data typically stored in a SaaS application? - ANSWER-in the cloud, in a
database controlled by the SaaS provider
Who is responsible for the security settings in an enterprise SaaS application? (choose
the best answer) - ANSWER-Both IT administrators and users
When is it impossible to secure SaaS data? - ANSWER-when a user uses an
unmanaged device to access an unsanctioned SaaS
True or False. An organization can be compliant with all applicable security and privacy
regulations for its industry yet still not be secure. - ANSWER-True
Which three data fields are considered personally identifiable information (PII)? (select
three) - ANSWER-unique identification number (such as driver's license number), phone
number, fingerprints
Which risk is eliminated in an organization that is 100% compliant? - ANSWER-having
the regulator punish you for being non-compliant
What does CVE mean? - ANSWER-Common Vulnerabilities and Exposures
What is the difference between CVE and CVSS? - ANSWER-CVE tells you what the
vulnerabilities are. CVSS gives vulnerabilities a score (0- 10) to evaluate how serious
they are.
True or False. External threat actors have accounted for the majority of data breaches
over the past five years. - ANSWER-True
GUIDE FOR PALO ALTO PCCET) WITH
COMPLETE SOLUTIONS
True or False: Business intelligence (BI) software consists of tools and techniques used
to surface large amounts of raw unstructured data to perform a variety of tasks,
including data mining, event processing, and predictive analytics. - ANSWER-True
True or False: The process in which end users find personal technology and apps that
are more powerful or capable, more convenient, less expensive, quicker to install, and
easier to use than enterprise IT solutions is known as consumerization. - ANSWER-
True
Which action is associated with Web 1.0? - ANSWER-checking CNN's website for news
Which action is associated with Web 3.0? - ANSWER-asking Apple's Siri a question
Gmail is associated with which cloud computing model? - ANSWER-SaaS
Which two port numbers are associated with HTTP? (Choose two.) - ANSWER-80,
8080
Which port number is associated with HTTPS? - ANSWER-443
Which port is used for encrypted communication? - ANSWER-22
Which protocol distinguishes between applications using port numbers? - ANSWER-
TCP
How do attackers prevent port scans from being noticed by monitoring software? -
ANSWER-Scan ports so quickly it is finished before it can be detected and stopped
Which potentially risky attribute is the most serious? - ANSWER-Malware
Which one of these applications can be used as a tunnel for other applications? -
ANSWER-SSH
Which two devices or systems require the configuration of non-standard ports to be able
to use an application on a non-standard port? (Choose two.) - ANSWER-Client, Server
If you are responsible for the application's security, but not the operating system's
security, which cloud computing service model are you using? - ANSWER-PaaS
, Which stage of the cyberattack lifecycle involves querying public databases and testing
exploits in the attacker's internal network? - ANSWER-Weaponization and Delivery
Which step is involved in getting malware to run on the inside of the targeted
organization? - ANSWER-Exploitation and Installation
In which stage of the cyberattack lifecycle would you identify unusual communication
between an internal database that should not access the internet and an external
server? - ANSWER-Command and Control
Which two malware types are self-replicating? (Choose two.) - ANSWER-Virus, Worm
Which two malware types are likely to be left behind by a disgruntled employee?
(Choose two.) - ANSWER-Logic Bomb, Backdoor
Which kind of security always is the responsibility of the cloud customer? - ANSWER-
Data Security
Where is your data typically stored in a SaaS application? - ANSWER-in the cloud, in a
database controlled by the SaaS provider
Who is responsible for the security settings in an enterprise SaaS application? (choose
the best answer) - ANSWER-Both IT administrators and users
When is it impossible to secure SaaS data? - ANSWER-when a user uses an
unmanaged device to access an unsanctioned SaaS
True or False. An organization can be compliant with all applicable security and privacy
regulations for its industry yet still not be secure. - ANSWER-True
Which three data fields are considered personally identifiable information (PII)? (select
three) - ANSWER-unique identification number (such as driver's license number), phone
number, fingerprints
Which risk is eliminated in an organization that is 100% compliant? - ANSWER-having
the regulator punish you for being non-compliant
What does CVE mean? - ANSWER-Common Vulnerabilities and Exposures
What is the difference between CVE and CVSS? - ANSWER-CVE tells you what the
vulnerabilities are. CVSS gives vulnerabilities a score (0- 10) to evaluate how serious
they are.
True or False. External threat actors have accounted for the majority of data breaches
over the past five years. - ANSWER-True
