Palo Alto PCCET UPDATED Exam
Questions and CORRECT Answers
Which type of cyberattack sends extremely high volumes of network traffic such as packets,
data, or transactions that render the victim's network unavailable or unusable?
A. distributed denial-of-service (DDoS)
B. spamming botnet
C. phishing botnet
D. denial-of-service (DoS) - CORRECT ANSWER -A
Which core component of Cortex combines security orchestration, incident management, and
interactive investigation to serve security teams across the incident lifecycle?
A. AutoFocus
B. Cortex XDR
C. Cortex XSOAR
D. Cortex Data Lake - CORRECT ANSWER -C
Which type of advanced malware has entire sections of code that serve no purpose other than to
change the signature of the malware, thus producing an infinite number of signature hashes for
even the smallest of malware programs?
A. distributed
B. polymorphic
C. multi-functional
D. obfuscated - CORRECT ANSWER -B
Which type of phishing attack is specifically directed at senior executives or other high-profile
targets within an organization?
A. whaling
B. watering hole
C. pharming
,D. spear phishing - CORRECT ANSWER -A
Which wireless security protocol includes improved security for IoT devices, smart bulbs,
wireless appliances, and smart speakers?
A. WPA2
B. WPA3
C. WPA1
D. WEP - CORRECT ANSWER -B
Which tactic, technique, or procedure (TTP) masks application traffic over port 443 (HTTPS)?
A. using non-standard ports
B. hopping ports
C. hiding within SSL encryption
D. tunneling - CORRECT ANSWER -C
Which specific technology is associated with Web 3.0?
A. social networks
B. instant messaging
C. remote meeting software
D. blockchain - CORRECT ANSWER -D
Which Wi-Fi attack leverages device information about which wireless networks it previously
connected to?
A. evil twin
B. man-in-the-middle
C. Jasager
D. SSLstrip - CORRECT ANSWER -C
,Which malware type is installed in the BIOS of a machine, which means operating system level
tools cannot detect it?
A. rootkit
B. logic bomb
C. ransomware
D. spyware - CORRECT ANSWER -A
Which Zero Trust capability provides a combination of anti-malware and intrusion prevention
technologies to protect against both known and unknown threats, including mobile device
threats?
A. least privilege
B. secure access
C. inspection of all traffic
D. cyberthreat protection - CORRECT ANSWER -D
Which three options describe the relationship and interaction between a customer and SaaS?
(Choose three.)
A. subscription service
B. extensive manpower required
C. internet- or application-based
D. complex deployment
E. convenient and economical - CORRECT ANSWER - ACE
Mobile devices are easy targets for attacks for which two reasons? (Choose two.)
A. They have poor battery-charging capabilities.
B. They use speaker phones.
C. They stay in an always-on, always-present state.
D. They roam in unsecured areas. - CORRECT ANSWER - CD
, Which path or tool is used by attackers?
A. storage-area networks (SAN)
B. anti-malware update
C. SaaS
D. threat vector - CORRECT ANSWER -D
Which kind of server is a master server that is designed to listen to individual compromised
endpoints and respond with appropriate attack commands?
A. command and control
B. bot
C. web
D. directory services - CORRECT ANSWER -A
What type of malware can have multiple control servers distributed all over the world with
multiple fallback options?
A. logic bombs
B. rootkits
C. advanced or modern
D. exploits - CORRECT ANSWER -C
Which type of malware disables protection software?
A. anti-AV
B. Trojan horse
C. ransomware
D. worm - CORRECT ANSWER -A
Another term for a bot is a "zombie". (True or False) - CORRECT ANSWER -T
Questions and CORRECT Answers
Which type of cyberattack sends extremely high volumes of network traffic such as packets,
data, or transactions that render the victim's network unavailable or unusable?
A. distributed denial-of-service (DDoS)
B. spamming botnet
C. phishing botnet
D. denial-of-service (DoS) - CORRECT ANSWER -A
Which core component of Cortex combines security orchestration, incident management, and
interactive investigation to serve security teams across the incident lifecycle?
A. AutoFocus
B. Cortex XDR
C. Cortex XSOAR
D. Cortex Data Lake - CORRECT ANSWER -C
Which type of advanced malware has entire sections of code that serve no purpose other than to
change the signature of the malware, thus producing an infinite number of signature hashes for
even the smallest of malware programs?
A. distributed
B. polymorphic
C. multi-functional
D. obfuscated - CORRECT ANSWER -B
Which type of phishing attack is specifically directed at senior executives or other high-profile
targets within an organization?
A. whaling
B. watering hole
C. pharming
,D. spear phishing - CORRECT ANSWER -A
Which wireless security protocol includes improved security for IoT devices, smart bulbs,
wireless appliances, and smart speakers?
A. WPA2
B. WPA3
C. WPA1
D. WEP - CORRECT ANSWER -B
Which tactic, technique, or procedure (TTP) masks application traffic over port 443 (HTTPS)?
A. using non-standard ports
B. hopping ports
C. hiding within SSL encryption
D. tunneling - CORRECT ANSWER -C
Which specific technology is associated with Web 3.0?
A. social networks
B. instant messaging
C. remote meeting software
D. blockchain - CORRECT ANSWER -D
Which Wi-Fi attack leverages device information about which wireless networks it previously
connected to?
A. evil twin
B. man-in-the-middle
C. Jasager
D. SSLstrip - CORRECT ANSWER -C
,Which malware type is installed in the BIOS of a machine, which means operating system level
tools cannot detect it?
A. rootkit
B. logic bomb
C. ransomware
D. spyware - CORRECT ANSWER -A
Which Zero Trust capability provides a combination of anti-malware and intrusion prevention
technologies to protect against both known and unknown threats, including mobile device
threats?
A. least privilege
B. secure access
C. inspection of all traffic
D. cyberthreat protection - CORRECT ANSWER -D
Which three options describe the relationship and interaction between a customer and SaaS?
(Choose three.)
A. subscription service
B. extensive manpower required
C. internet- or application-based
D. complex deployment
E. convenient and economical - CORRECT ANSWER - ACE
Mobile devices are easy targets for attacks for which two reasons? (Choose two.)
A. They have poor battery-charging capabilities.
B. They use speaker phones.
C. They stay in an always-on, always-present state.
D. They roam in unsecured areas. - CORRECT ANSWER - CD
, Which path or tool is used by attackers?
A. storage-area networks (SAN)
B. anti-malware update
C. SaaS
D. threat vector - CORRECT ANSWER -D
Which kind of server is a master server that is designed to listen to individual compromised
endpoints and respond with appropriate attack commands?
A. command and control
B. bot
C. web
D. directory services - CORRECT ANSWER -A
What type of malware can have multiple control servers distributed all over the world with
multiple fallback options?
A. logic bombs
B. rootkits
C. advanced or modern
D. exploits - CORRECT ANSWER -C
Which type of malware disables protection software?
A. anti-AV
B. Trojan horse
C. ransomware
D. worm - CORRECT ANSWER -A
Another term for a bot is a "zombie". (True or False) - CORRECT ANSWER -T
