PCCET practice questions 61–70

1. Question 61 · 154 in bank

   Select 2

   You have been invited to a public cloud design and architecture session to help deliver secure east west flows and secure Kubernetes workloads. What deployment options do you have available? (Choose two.)

   • APA-Series
   • BVM-Series
   • CPanorama
   • DCN-Series

   Show answer

   Answer: BD

   Explanation

   I think D should be included as well as B. The official study guide on pg 102 says "CN-Series is the container native version of the ML-powered Next-Generation Firewall (NGFW) that is designed specifically for Kubernetes environments. CN-Series container firewalls help network security teams safeguard developers with deep security integration into Kubernetes orchestration. Deploy the CN-Series to secure traffic between pods in different trust zones and namespaces, for protection against known and zero-day malware, and to block data exfiltration from your containerized environments.

   Source: Adapted from community discussion — rob899

   Next question

2. Question 62 · 154 in bank

   What is the definition of a zero-day threat?

   • AThe amount of time it takes to discover a vulnerability and release a security fix
   • BThe period between the discovery of a vulnerability and development and release of a patch
   • CThe day a software vendor becomes aware of an exploit and prevents any further hacking
   • DA specific day during which zero threats occurred

   Show answer

   Answer: B

   Next question

3. Question 63 · 154 in bank

   What differentiates knowledge-based systems from behavior-based systems?

   • ABehavior-based systems find the data that knowledge-based systems store.
   • BKnowledge-based systems pull from a previously stored database that distinguishes “bad”.
   • CKnowledge-based systems try to find new, distinct traits to find “bad” things.
   • DBehavior-based systems pull from a previously stored database that distinguishes “bad”.

   Show answer

   Answer: B

   Next question

4. Question 64 · 154 in bank

   What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake?

   • Aconnectors and interfaces
   • Binfrastructure and containers
   • Ccontainers and developers
   • Ddata center and UPS

   Show answer

   Answer: A

   Next question

5. Question 65 · 154 in bank

   Which activities do local organization security policies cover for a SaaS application?

   • Ahow the data is backed up in one or more locations
   • Bhow the application can be used
   • Chow the application processes the data
   • Dhow the application can transit the Internet

   Show answer

   Answer: B

   Next question

6. Question 66 · 154 in bank

   How can local systems eliminate vulnerabilities?

   • APatch systems and software effectively and continuously.
   • BCreate preventative memory-corruption techniques.
   • CPerform an attack on local systems.
   • DTest and deploy patches on a focused set of systems.

   Show answer

   Answer: A

   Explanation

   Local systems can eliminate vulnerabilities by: A. Patch systems and software effectively and continuously. Regularly applying security patches and updates to both the operating system and software applications is a critical practice to eliminate vulnerabilities. These patches often address known security flaws and help protect the system from exploitation by malicious actors. Effective and continuous patch management is a fundamental component of a robust cybersecurity strategy to keep local systems secure. Options B and C are not standard practices for eliminating vulnerabilities. Option D, testing and deploying patches on a focused set of systems, is related to patch management but doesn't address the "effective and continuous" aspect of vulnerability elimination.

   Source: Adapted from community discussion — leipeG

   Next question

7. Question 67 · 154 in bank

   Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next-generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages?

   • AThreat Prevention
   • BDNS Security
   • CWildFire
   • DURL Filtering

   Show answer

   Answer: D

   Next question

8. Question 68 · 154 in bank

   What is one of the elements of SecOps?

   • AZero Trust model
   • BInterfaces
   • CInfrastructure
   • DFinances

   Show answer

   Answer: B

   Explanation

   B p261 1. Business (goals and outcomes) 2. People (who will perform the work) 3. Interfaces (external functions to help achieve goals) 4. Visibility (information needed to accomplish goals) 5. Technology (capabilities needed to provide visibility and enable people) 6. Processes (tactical steps needed to execute on goals) All of the elements tie back to the business itself and the goals of the

   Source: Adapted from community discussion — powr

   Next question

9. Question 69 · 154 in bank

   Which Palo Alto Networks service is a scalable, cloud-based log repository that stores context-rich logs generated by Palo Alto Networks security products?

   • ACortex XDR
   • BCortex XSOAR
   • CCortex Data Lake
   • DCortex Xpanse

   Show answer

   Answer: C

   Next question

10. Question 70 · 154 in bank

    Select 3

    Layer 4 of the TCP/IP Model corresponds to which three Layer(s) of the OSI Model? (Choose three.)

    • ATransport
    • BPresentation
    • CSession
    • DApplication
    • ENetwork

    Show answer

    Answer: BCD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCCET practice, question 61. 154 questions available.