PCCSA EXAM QUESTIONS AND
ANSWERS
State-Sponsored - Correct Answers -Which type of adversary would commit
cybercrimes with the authorization of their country's government?
Limiting - Correct Answers -When a company chooses to deploy a branch location with
antivirus software, which risk model are they using to manage risk?
Uses a botnet to flood traffic to a target network - Correct Answers -Which option
describes a characteristic of a distributed denial-of-service attack?
Certificate Authority - Correct Answers -What is a component of a public key
infrastructure?
PAN-DB database - Correct Answers -From which resource can a Palo Alto Networks
firewall get URL category information for URLs whose categories cannot be found on
the firewall?
multiple guest operating systems to run on a single physical machine - Correct Answers
-What does a hypervisor enable?
It assumes that every internal endpoint can be trusted - Correct Answers -Identify a
weakness of a perimeter-based network security strategy to protect an
organization’s endpoint systems.
Next-generation firewalls - Correct Answers -Which type of security device uses a
single-pass, parallel processor hardware architecture to accelerate content inspection?
TCP port 25 - Correct Answers -Which well-known port is associated with the Simple
Mail Transfer Protocol?
any organization that accepts, transmits, or stores any cardholder data - Correct
Answers -To which type of organization does the PCI DSS apply?
Policy Reinforcement - Correct Answers -Which mobile device management feature
prevents jailbreaking or rooting?
, Endpoint anti-virus software - Correct Answers -Which security component should you
configure to block viruses not seen and blocked by the perimeter firewall?
Magnifier - Correct Answers -Which Palo Alto Networks product or feature includes
machine learning to enhance security?
Denial-of-service - Correct Answers -Which type of attack floods a target with ICMP
requests?
Access Point - Correct Answers -Which device would an Evil Twin attack use to lure the
victim to connect to the attack surface network?
Data Encryption and Encrypted Tunnels - Correct Answers -What are two methods to
securely transmit personally identifiable information?
Confidentiality - Correct Answers -What is the primary purpose of using encryption as
part of your network data security architecture?
Physical Security - Correct Answers -Which security component should be used to
prevent a malware attack delivered by USB drive?
Exposed government-protected health information - Correct Answers -Financial loss
due to fines/penalties
Exposed proprietary engineering secrets - Correct Answers -financial loss due to loss of
competitive edge
Defaced Website - Correct Answers -public embarassment and potential financial
impact
Ransomware attack - Correct Answers -financial loss due to downtime
retailing loss of credit card numbers - Correct Answers -financial loss due to loss of
consumer confidence
A malicious PDF file located on an internet website - Correct Answers -A firewall located
on an organization's network perimeter can be used to protect against which type of
attack?
Traps - Correct Answers -Which Palo Alto Networks tool is used to prevent endpoint
systems from running malware executables such as viruses, trojans and rootkits?
VoIP - Correct Answers -Which protocol converts voice into a digital signal?
Denial-of-service - Correct Answers -Which type of attack floods a target with TCP SYN
requests?
ANSWERS
State-Sponsored - Correct Answers -Which type of adversary would commit
cybercrimes with the authorization of their country's government?
Limiting - Correct Answers -When a company chooses to deploy a branch location with
antivirus software, which risk model are they using to manage risk?
Uses a botnet to flood traffic to a target network - Correct Answers -Which option
describes a characteristic of a distributed denial-of-service attack?
Certificate Authority - Correct Answers -What is a component of a public key
infrastructure?
PAN-DB database - Correct Answers -From which resource can a Palo Alto Networks
firewall get URL category information for URLs whose categories cannot be found on
the firewall?
multiple guest operating systems to run on a single physical machine - Correct Answers
-What does a hypervisor enable?
It assumes that every internal endpoint can be trusted - Correct Answers -Identify a
weakness of a perimeter-based network security strategy to protect an
organization’s endpoint systems.
Next-generation firewalls - Correct Answers -Which type of security device uses a
single-pass, parallel processor hardware architecture to accelerate content inspection?
TCP port 25 - Correct Answers -Which well-known port is associated with the Simple
Mail Transfer Protocol?
any organization that accepts, transmits, or stores any cardholder data - Correct
Answers -To which type of organization does the PCI DSS apply?
Policy Reinforcement - Correct Answers -Which mobile device management feature
prevents jailbreaking or rooting?
, Endpoint anti-virus software - Correct Answers -Which security component should you
configure to block viruses not seen and blocked by the perimeter firewall?
Magnifier - Correct Answers -Which Palo Alto Networks product or feature includes
machine learning to enhance security?
Denial-of-service - Correct Answers -Which type of attack floods a target with ICMP
requests?
Access Point - Correct Answers -Which device would an Evil Twin attack use to lure the
victim to connect to the attack surface network?
Data Encryption and Encrypted Tunnels - Correct Answers -What are two methods to
securely transmit personally identifiable information?
Confidentiality - Correct Answers -What is the primary purpose of using encryption as
part of your network data security architecture?
Physical Security - Correct Answers -Which security component should be used to
prevent a malware attack delivered by USB drive?
Exposed government-protected health information - Correct Answers -Financial loss
due to fines/penalties
Exposed proprietary engineering secrets - Correct Answers -financial loss due to loss of
competitive edge
Defaced Website - Correct Answers -public embarassment and potential financial
impact
Ransomware attack - Correct Answers -financial loss due to downtime
retailing loss of credit card numbers - Correct Answers -financial loss due to loss of
consumer confidence
A malicious PDF file located on an internet website - Correct Answers -A firewall located
on an organization's network perimeter can be used to protect against which type of
attack?
Traps - Correct Answers -Which Palo Alto Networks tool is used to prevent endpoint
systems from running malware executables such as viruses, trojans and rootkits?
VoIP - Correct Answers -Which protocol converts voice into a digital signal?
Denial-of-service - Correct Answers -Which type of attack floods a target with TCP SYN
requests?
