PCCET practice questions 141–150

1. Question 141 · 154 in bank

   In which phase of the cyberattack lifecycle do attackers establish encrypted communication channels back to servers across the internet so that they can modify their attack objectives and methods?

   • Aexploitation
   • Bactions on the objective
   • Ccommand and control
   • Dinstallation

   Show answer

   Answer: C

   Explanation

   Command and Control: Attackers establish encrypted communication channels back to command-and-control (C2) servers across the internet so that they can modify their attack objectives and methods as additional targets of opportunity are identified within the victim network, or to evade any new security countermeasures that the organization may attempt to deploy if attack artifacts are discovered.

   Source: Adapted from community discussion — blahblah1234567890000

   Next question

2. Question 142 · 154 in bank

   Which type of IDS/IPS uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt?

   • AKnowledge-based
   • BSignature-based
   • CBehavior-based
   • DDatabase-based

   Show answer

   Answer: C

   Explanation

   IDSs and IPSs also can be classified as knowledge-based (or signature-based) or behavior-based (or statistical anomaly-based) systems: ● A knowledge-based system uses a database of known vulnerabilities and attack profiles to identify intrusion attempts. These types of systems have lower false-alarm rates than behavior-based systems but must be continually updated with new attack signatures to be effective. ● A behavior-based system uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt. These types of systems are more adaptive than knowledge-based systems and therefore may be more effective in detecting previously unknown vulnerabilities and attacks, but they have a much higher false-positive rate than knowledge-based systems

   Source: Adapted from community discussion — blahblah1234567890000

   Next question

3. Question 143 · 154 in bank

   What differentiates Docker from a bare metal hypervisor?

   • ADocker lets the user boot up one or more instances of an operating system on the same host whereas hypervisors do not
   • BDocker uses more resources than a bare metal hypervisor
   • CDocker is more efficient at allocating resources for legacy systems
   • DDocker uses OS-level virtualization, whereas a bare metal hypervisor runs independently from the OS

   Show answer

   Answer: D

   Next question

4. Question 144 · 154 in bank

   On which security principle does virtualization have positive effects?

   • Aintegrity
   • Bconfidentiality
   • Cavailability
   • Dnon-repudiation

   Show answer

   Answer: C

   Next question

5. Question 145 · 154 in bank

   Which type of malware takes advantage of a vulnerability on an endpoint or server?

   • Atechnique
   • Bpatch
   • Cvulnerability
   • Dexploit

   Show answer

   Answer: D

   Explanation

   Answer is D Study Guide page 32 under Exploitation phase of the Cyberattack Lifecycle "An end user may unwittingly trigger an exploit, for example, by clicking a malicious link or opening an infected attachment in an email, or an attacker may remotely trigger an exploit against a known server vulnerability on the target network. Breaking the cyberattack lifecycle at this phase of an attack, as during the Reconnaissance phase, begins with proactive and effective end-user security awareness training that focuses on topics such as malware prevention and email security."

   Source: Adapted from community discussion — Syfusion

   Next question

6. Question 146 · 154 in bank

   DRAG DROP - Match the Palo Alto Networks WildFire analysis verdict with its definition. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Possible verdicts include: ● Benign: Safe and does not exhibit malicious behavior ● Grayware: No security risk but might display obtrusive behavior (for example, adware, spyware, and browser helper objects) ● Malware: Malicious in nature and intent and can pose a security threat (for example, viruses, worms, trojans, root kits, botnets, and remote-access toolkits) ● Phishing: Malicious attempt to trick the recipient into revealing sensitive data

   Source: Adapted from community discussion — blahblah1234567890000

   

   Next question

7. Question 147 · 154 in bank

   What protocol requires all routers in the same domain to maintain a map of the network?

   • AEIGRP
   • BStatic
   • CRIP
   • DOSPF

   Show answer

   Answer: D

   Next question

8. Question 148 · 154 in bank

   A doctor receives an email about her upcoming holiday in France. When she clicks the URL website link in the email, the connection is blocked by her office firewall because it's a known malware website. Which type of attack includes a link to a malware website in an email?

   • Awhaling
   • Bphishing
   • Cpharming
   • Dspam

   Show answer

   Answer: B

   Next question

9. Question 149 · 154 in bank

   With regard to cloud-native security in layers, what is the correct order of the four C's from the top (surface) layer to the bottom (base) layer?

   • Acontainer, code, cluster, cloud
   • Bcode, container, cluster, cloud
   • Ccode, container, cloud, cluster
   • Dcontainer, code, cloud, cluster

   Show answer

   Answer: B

   References

   • Kubernetes documentation

   Next question

10. Question 150 · 154 in bank

    Under which category does an application that is approved by the IT department, such as Office 365, fall?

    • Aunsanctioned
    • Bprohibited
    • Ctolerated
    • Dsanctioned

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCET practice, question 141. 154 questions available.