PALO ALTO PCCET STUDY GUIDE EXAM 2026/2027
QUESTIONS AND SOLUTIONS RATED A+
✔✔Which option is an example of a North-South traffic flow?
Traffic between an internal server and internal user
Client-server interactions that cross the edge perimeter
An internal three-tier application
Lateral movement within a cloud or data center - ✔✔Client-server interactions that cross
the edge perimeter.
✔✔In the attached network diagram, which device is the switch?
A
B
C
D - ✔✔D
✔✔Which key component is used to configure a static route?
routing protocol
next hop IP address
enable setting
router ID - ✔✔Next hop IP address
✔✔Routing Information Protocol (RIP), uses what metric to determine how network
traffic should flow?
Shortest Path
Split Horizon
Path Vector
Hop Count - ✔✔Hop Count
✔✔Which networking device increases the number of collision domains?
Router
Switch
Hub
Wireless repeater - ✔✔Switch
✔✔Which type of LAN technology is being displayed in the diagram?
Star Topology
Bus Topology
Spine Leaf Topology
,Mesh Topology - ✔✔Mesh Topology
✔✔Which TCP/IP sub-protocol operates at Layer4 of the OSI model?
UDP
SSH
FTP
HTTPS - ✔✔UDP
✔✔Which TCP/IP sub-protocol operates at the Layer7 of the OSI model?
UDP
MAC
NFS
SNMP - ✔✔SNMP
✔✔During the OSI layer 3 step of the encapsulation process, what is the Protocol Data
Unit (PDU) called when the IP stack adds source (sender) and destination (receiver) IP
addresses?
Data
Segment
Packet
Frame - ✔✔Packet
✔✔Which IPsec feature allows device traffic to go directly to the Internet?
IKE Security Association
Split tunneling
Diffie-Hellman groups
Authentication Header (AH) - ✔✔Split tunneling
✔✔Which option would be an example of PII that you need to prevent from leaving your
enterprise network?
Credit card number
Trade secret
National security information
A symmetric encryption key - ✔✔Credit card number
✔✔When signature-based antivirus software detects malware, what three things does it
do to provide protection? (Choose three.)
Quarantine the infected file.
Delete the infected file.
, Remove the infected file's extension.
Alert system administrators.
Decrypt the infected file using base64. - ✔✔Quarantine the infected file.
Delete the infected file.
Alert system administrators.
✔✔In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly
identified as malicious traffic?
False-negative
True-negative
False-positive
True-positive - ✔✔False-positive
✔✔Which two network resources does a directory service database contain? (Choose
two.)
Users
Terminal shell types on endpoints
/etc/shadow files
Services - ✔✔Users
Services
✔✔Which Palo Alto Networks subscription service complements App-ID by enabling
you to configure the next-generation firewall to identify and control access to websites
and to protect your organization from websites hosting malware and phishing pages?
DNS Security
WildFire
URL Filtering
Threat Prevention - ✔✔URL Filtering
✔✔What does a directory service associate with users in order to control access to
resources?
Position descriptions
Permissions
Supervisor status
Tenure within an organization - ✔✔Permissions
✔✔What User identification for network and services access is implemented by
applying policies?
Key Security Management
Identity Tag Management
QUESTIONS AND SOLUTIONS RATED A+
✔✔Which option is an example of a North-South traffic flow?
Traffic between an internal server and internal user
Client-server interactions that cross the edge perimeter
An internal three-tier application
Lateral movement within a cloud or data center - ✔✔Client-server interactions that cross
the edge perimeter.
✔✔In the attached network diagram, which device is the switch?
A
B
C
D - ✔✔D
✔✔Which key component is used to configure a static route?
routing protocol
next hop IP address
enable setting
router ID - ✔✔Next hop IP address
✔✔Routing Information Protocol (RIP), uses what metric to determine how network
traffic should flow?
Shortest Path
Split Horizon
Path Vector
Hop Count - ✔✔Hop Count
✔✔Which networking device increases the number of collision domains?
Router
Switch
Hub
Wireless repeater - ✔✔Switch
✔✔Which type of LAN technology is being displayed in the diagram?
Star Topology
Bus Topology
Spine Leaf Topology
,Mesh Topology - ✔✔Mesh Topology
✔✔Which TCP/IP sub-protocol operates at Layer4 of the OSI model?
UDP
SSH
FTP
HTTPS - ✔✔UDP
✔✔Which TCP/IP sub-protocol operates at the Layer7 of the OSI model?
UDP
MAC
NFS
SNMP - ✔✔SNMP
✔✔During the OSI layer 3 step of the encapsulation process, what is the Protocol Data
Unit (PDU) called when the IP stack adds source (sender) and destination (receiver) IP
addresses?
Data
Segment
Packet
Frame - ✔✔Packet
✔✔Which IPsec feature allows device traffic to go directly to the Internet?
IKE Security Association
Split tunneling
Diffie-Hellman groups
Authentication Header (AH) - ✔✔Split tunneling
✔✔Which option would be an example of PII that you need to prevent from leaving your
enterprise network?
Credit card number
Trade secret
National security information
A symmetric encryption key - ✔✔Credit card number
✔✔When signature-based antivirus software detects malware, what three things does it
do to provide protection? (Choose three.)
Quarantine the infected file.
Delete the infected file.
, Remove the infected file's extension.
Alert system administrators.
Decrypt the infected file using base64. - ✔✔Quarantine the infected file.
Delete the infected file.
Alert system administrators.
✔✔In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly
identified as malicious traffic?
False-negative
True-negative
False-positive
True-positive - ✔✔False-positive
✔✔Which two network resources does a directory service database contain? (Choose
two.)
Users
Terminal shell types on endpoints
/etc/shadow files
Services - ✔✔Users
Services
✔✔Which Palo Alto Networks subscription service complements App-ID by enabling
you to configure the next-generation firewall to identify and control access to websites
and to protect your organization from websites hosting malware and phishing pages?
DNS Security
WildFire
URL Filtering
Threat Prevention - ✔✔URL Filtering
✔✔What does a directory service associate with users in order to control access to
resources?
Position descriptions
Permissions
Supervisor status
Tenure within an organization - ✔✔Permissions
✔✔What User identification for network and services access is implemented by
applying policies?
Key Security Management
Identity Tag Management
