PA PCCET Study Guide UPDATED Exam
Questions and CORRECT Answers
True or False: Business intelligence (BI) software consists of tools and techniques used to
surface large amounts of raw unstructured data to perform a variety of tasks, including data
mining, event processing, and predictive analytics. - CORRECT ANSWER - True
True or False: The process in which end users find personal technology and apps that are more
powerful or capable, more convenient, less expensive, quicker to install, and easier to use than
enterprise IT solutions is known as consumerization. - CORRECT ANSWER - True
Which action is associated with Web 1.0? - CORRECT ANSWER - checking CNN's
website for news
Which action is associated with Web 3.0? - CORRECT ANSWER - asking Apple's Siri a
question
Gmail is associated with which cloud computing model? - CORRECT ANSWER - SaaS
Which two port numbers are associated with HTTP? (Choose two.) - CORRECT
ANSWER - 80, 8080
Which port number is associated with HTTPS? - CORRECT ANSWER - 443
Which port is used for encrypted communication? - CORRECT ANSWER - 22
Which protocol distinguishes between applications using port numbers? - CORRECT
ANSWER - TCP
,How do attackers prevent port scans from being noticed by monitoring software? - CORRECT
ANSWER - Scan ports so quickly it is finished before it can be detected and stopped
Which potentially risky attribute is the most serious? - CORRECT ANSWER - Malware
Which one of these applications can be used as a tunnel for other applications? - CORRECT
ANSWER - SSH
Which two devices or systems require the configuration of non-standard ports to be able to use
an application on a non-standard port? (Choose two.) - CORRECT ANSWER - Client,
Server
If you are responsible for the application's security, but not the operating system's security, which
cloud computing service model are you using? - CORRECT ANSWER - PaaS
Which kind of security always is the responsibility of the cloud customer? - CORRECT
ANSWER - Data Security
Where is your data typically stored in a SaaS application? - CORRECT ANSWER - in the
cloud, in a database controlled by the SaaS provider
Who is responsible for the security settings in an enterprise SaaS application? (choose the best
answer) - CORRECT ANSWER - Both IT administrators and users
When is it impossible to secure SaaS data? - CORRECT ANSWER - when a user uses an
unmanaged device to access an unsanctioned SaaS
True or False. An organization can be compliant with all applicable security and privacy
regulations for its industry yet still not be secure. - CORRECT ANSWER - True
, Which three data fields are considered personally identifiable information (PII)? (select three) -
CORRECT ANSWER - unique identification number (such as driver's license number),
phone number, fingerprints
Which risk is eliminated in an organization that is 100% compliant? - CORRECT
ANSWER - having the regulator punish you for being non-compliant
What does CVE mean? - CORRECT ANSWER - Common Vulnerabilities and Exposures
What is the difference between CVE and CVSS? - CORRECT ANSWER - CVE tells you
what the vulnerabilities are. CVSS gives vulnerabilities a score (0- 10) to evaluate how serious
they are.
True or False. External threat actors have accounted for the majority of data breaches over the
past five years. - CORRECT ANSWER - True
Which group is likely to attack indiscriminately, whether you are a valuable target or not? -
CORRECT ANSWER - Cyberterrorists
Which group is primarily motivated by money? - CORRECT ANSWER - Cybercriminals
True or False: The cyberattack lifecycle is a seven-step process. - CORRECT ANSWER -
True
True or False: An attacker needs to succeed in executing only one step of the cyberattack
lifecycle to infiltrate a network, whereas a defender must "be right every time" and break every
step of the chain to prevent an attack. - CORRECT ANSWER - False
True or False: The key to breaking the cyberattack lifecycle during the Installation phase is to
implement network segmentation, a Zero Trust model, and granular control of applications to
limit or restrict an attacker's lateral movement within the network. - CORRECT
ANSWER - True
Questions and CORRECT Answers
True or False: Business intelligence (BI) software consists of tools and techniques used to
surface large amounts of raw unstructured data to perform a variety of tasks, including data
mining, event processing, and predictive analytics. - CORRECT ANSWER - True
True or False: The process in which end users find personal technology and apps that are more
powerful or capable, more convenient, less expensive, quicker to install, and easier to use than
enterprise IT solutions is known as consumerization. - CORRECT ANSWER - True
Which action is associated with Web 1.0? - CORRECT ANSWER - checking CNN's
website for news
Which action is associated with Web 3.0? - CORRECT ANSWER - asking Apple's Siri a
question
Gmail is associated with which cloud computing model? - CORRECT ANSWER - SaaS
Which two port numbers are associated with HTTP? (Choose two.) - CORRECT
ANSWER - 80, 8080
Which port number is associated with HTTPS? - CORRECT ANSWER - 443
Which port is used for encrypted communication? - CORRECT ANSWER - 22
Which protocol distinguishes between applications using port numbers? - CORRECT
ANSWER - TCP
,How do attackers prevent port scans from being noticed by monitoring software? - CORRECT
ANSWER - Scan ports so quickly it is finished before it can be detected and stopped
Which potentially risky attribute is the most serious? - CORRECT ANSWER - Malware
Which one of these applications can be used as a tunnel for other applications? - CORRECT
ANSWER - SSH
Which two devices or systems require the configuration of non-standard ports to be able to use
an application on a non-standard port? (Choose two.) - CORRECT ANSWER - Client,
Server
If you are responsible for the application's security, but not the operating system's security, which
cloud computing service model are you using? - CORRECT ANSWER - PaaS
Which kind of security always is the responsibility of the cloud customer? - CORRECT
ANSWER - Data Security
Where is your data typically stored in a SaaS application? - CORRECT ANSWER - in the
cloud, in a database controlled by the SaaS provider
Who is responsible for the security settings in an enterprise SaaS application? (choose the best
answer) - CORRECT ANSWER - Both IT administrators and users
When is it impossible to secure SaaS data? - CORRECT ANSWER - when a user uses an
unmanaged device to access an unsanctioned SaaS
True or False. An organization can be compliant with all applicable security and privacy
regulations for its industry yet still not be secure. - CORRECT ANSWER - True
, Which three data fields are considered personally identifiable information (PII)? (select three) -
CORRECT ANSWER - unique identification number (such as driver's license number),
phone number, fingerprints
Which risk is eliminated in an organization that is 100% compliant? - CORRECT
ANSWER - having the regulator punish you for being non-compliant
What does CVE mean? - CORRECT ANSWER - Common Vulnerabilities and Exposures
What is the difference between CVE and CVSS? - CORRECT ANSWER - CVE tells you
what the vulnerabilities are. CVSS gives vulnerabilities a score (0- 10) to evaluate how serious
they are.
True or False. External threat actors have accounted for the majority of data breaches over the
past five years. - CORRECT ANSWER - True
Which group is likely to attack indiscriminately, whether you are a valuable target or not? -
CORRECT ANSWER - Cyberterrorists
Which group is primarily motivated by money? - CORRECT ANSWER - Cybercriminals
True or False: The cyberattack lifecycle is a seven-step process. - CORRECT ANSWER -
True
True or False: An attacker needs to succeed in executing only one step of the cyberattack
lifecycle to infiltrate a network, whereas a defender must "be right every time" and break every
step of the chain to prevent an attack. - CORRECT ANSWER - False
True or False: The key to breaking the cyberattack lifecycle during the Installation phase is to
implement network segmentation, a Zero Trust model, and granular control of applications to
limit or restrict an attacker's lateral movement within the network. - CORRECT
ANSWER - True
