PCCSA Quiz Questions & Answers |
100% Correct Answers | Verified | Latest
2024 Version
Intra-VM traffic is also known as which type of traffic? - ✔✔east-west
A network filter that allows administrators to restrict access to external content from within a network is
known as which of the following? - ✔✔Content
Which option describes the strength of Palo Alto Networks Traps operation? - ✔✔Blocks core exploit and
malware techniques
Which technique is NOT used to break the command-and-control (C&C) phase of the Cyber-Attack
Lifecycle? - ✔✔Vulnerability and patch management
True or False: The commonly used name for an intermediate area between a trusted network and an
untrusted network is the DMZ. - ✔✔True
What does the Palo Alto Networks Large Scale VPN feature use to authenticate network devices? -
✔✔Certificates
A scanner that listens in on a network and identifies vulnerable versions of both server and client
software is known as which of the following? - ✔✔Passive Vulnerability Scanner
Which three options are threat intelligence sources for AutoFocus?
A. WildFire
B. URL Filtering with PAN-DB Service
C. Unit 42 Threat Intelligence and Research Team
D. Third-Party Intrusion Prevention Systems - ✔✔A,B,C
, Which type of wireless attack intercepts the victim's web traffic, redirects the victim's browser to a web
server that it controls, and sends whatever content the attacker desires? - ✔✔SSLstrip
Which option describes malicious software or code that typically takes control of, collects information
from, or damages an infected endpoint? - ✔✔Malware
Panorama does not integrate with which option? - ✔✔Traditional port-based firewalls
In a PKI, what does one host use to encrypt data when it initiates a network connection to another host?
- ✔✔Private key
Which of the following best describes a set of security tests and evaluations that simulate attacks by a
hacker or other malicious external source? - ✔✔Penetration testing
Which option is NOT a defining characteristic of an NGFW? - ✔✔Adherence to strict port and protocol
enforcement for allow or block decisions
The method by which systems determine whether and how to admit a user into a trusted area of the
organization is known as what? - ✔✔Access control
What is a capability of the Palo Alto Networks Traps advanced endpoint protection product? -
✔✔Identifies unknown, zero-day vulnerabilities
Which of the following is not a dynamic routing protocol? - ✔✔Point-to-Point
Which option is NOT a core technique for identifying applications in Palo Alto Networks NGFWs? -
✔✔Packet headers
Which option is an example of a logical address? - ✔✔IP Address
100% Correct Answers | Verified | Latest
2024 Version
Intra-VM traffic is also known as which type of traffic? - ✔✔east-west
A network filter that allows administrators to restrict access to external content from within a network is
known as which of the following? - ✔✔Content
Which option describes the strength of Palo Alto Networks Traps operation? - ✔✔Blocks core exploit and
malware techniques
Which technique is NOT used to break the command-and-control (C&C) phase of the Cyber-Attack
Lifecycle? - ✔✔Vulnerability and patch management
True or False: The commonly used name for an intermediate area between a trusted network and an
untrusted network is the DMZ. - ✔✔True
What does the Palo Alto Networks Large Scale VPN feature use to authenticate network devices? -
✔✔Certificates
A scanner that listens in on a network and identifies vulnerable versions of both server and client
software is known as which of the following? - ✔✔Passive Vulnerability Scanner
Which three options are threat intelligence sources for AutoFocus?
A. WildFire
B. URL Filtering with PAN-DB Service
C. Unit 42 Threat Intelligence and Research Team
D. Third-Party Intrusion Prevention Systems - ✔✔A,B,C
, Which type of wireless attack intercepts the victim's web traffic, redirects the victim's browser to a web
server that it controls, and sends whatever content the attacker desires? - ✔✔SSLstrip
Which option describes malicious software or code that typically takes control of, collects information
from, or damages an infected endpoint? - ✔✔Malware
Panorama does not integrate with which option? - ✔✔Traditional port-based firewalls
In a PKI, what does one host use to encrypt data when it initiates a network connection to another host?
- ✔✔Private key
Which of the following best describes a set of security tests and evaluations that simulate attacks by a
hacker or other malicious external source? - ✔✔Penetration testing
Which option is NOT a defining characteristic of an NGFW? - ✔✔Adherence to strict port and protocol
enforcement for allow or block decisions
The method by which systems determine whether and how to admit a user into a trusted area of the
organization is known as what? - ✔✔Access control
What is a capability of the Palo Alto Networks Traps advanced endpoint protection product? -
✔✔Identifies unknown, zero-day vulnerabilities
Which of the following is not a dynamic routing protocol? - ✔✔Point-to-Point
Which option is NOT a core technique for identifying applications in Palo Alto Networks NGFWs? -
✔✔Packet headers
Which option is an example of a logical address? - ✔✔IP Address
