[Feb-2023] Use Real PCCET Dumps - 100% Free PCCET Exam Dumps [Q55-Q76] : Exams Labs Braindumps : http://blog.examslabs.com

QUESTION 55
What is the key to “taking down” a botnet?

prevent bots from communicating with the C2

install openvas software on endpoints

use LDAP as a directory service

block Docker engine software on endpoints

QUESTION 56
Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) fall under which Prisma access service layer?

Network

Management

Cloud

Security

QUESTION 57
Which type of malware replicates itself to spread rapidly through a computer network?

ransomware

Trojan horse

virus

worm

QUESTION 58
Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next- generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages?

Threat Prevention

DNS Security

WildFire

URL Filtering

QUESTION 59
Match the description with the VPN technology.

QUESTION 60
How does adopting a serverless model impact application development?

costs more to develop application code because it uses more compute resources

slows down the deployment of application code, but it improves the quality of code development

reduces the operational overhead necessary to deploy application code

prevents developers from focusing on just the application code because you need to provision the underlying infrastructure to run the code

QUESTION 61
What is the recommended method for collecting security logs from multiple endpoints?

Leverage an EDR solution to request the logs from endpoints.

Connect to the endpoints remotely and download the logs.

Configure endpoints to forward logs to a SIEM.

Build a script that pulls down the logs from all endpoints.

QUESTION 62
Which option describes the “selective network security virtualization” phase of incrementally transforming data centers?

during the selective network security virtualization phase, all intra-host communication paths are strictly controlled

during the selective network security virtualization phase, all intra-host traffic is forwarded to a Web proxy server

during the selective network security virtualization phase, all intra-host traffic is encapsulated and encrypted using the IPSEC protocol

during the selective network security virtualization phase, all intra-host traffic is load balanced

QUESTION 63
In addition to local analysis, what can send unknown files to WildFire for discovery and deeper analysis to rapidly detect potentially unknown malware?

Cortex XDR

AutoFocus

MineMild

Cortex XSOAR

QUESTION 64
What does SIEM stand for?

Security Infosec and Event Management

Security Information and Event Management

Standard Installation and Event Media

Secure Infrastructure and Event Monitoring

QUESTION 65
If an endpoint does not know how to reach its destination, what path will it take to get there?

The endpoint will broadcast to all connected network devices.

The endpoint will not send the traffic until a path is clarified.

The endpoint will send data to the specified default gateway.

The endpoint will forward data to another endpoint to send instead.

QUESTION 66
Which network firewall operates up to Layer 4 (Transport layer) of the OSI model and maintains information about the communication sessions which have been established between hosts on trusted and untrusted networks?

Group policy

Stateless

Stateful

Static packet-filter

QUESTION 67
Which type of IDS/IPS uses a baseline of normal network activity to identify unusual patterns or levels of network activity that may be indicative of an intrusion attempt?

Knowledge-based

Signature-based

Behavior-based

Database-based

QUESTION 68
What differentiates Docker from a bare metal hypervisor?

Docker lets the user boot up one or more instances of an operating system on the same host whereas hypervisors do not

Docker uses more resources than a bare metal hypervisor

Docker is more efficient at allocating resources for legacy systems

Docker uses OS-level virtualization, whereas a bare metal hypervisor runs independently from the OS

QUESTION 69
Which item accurately describes a security weakness that is caused by implementing a “ports first” data security solution in a traditional data center?

You may have to use port numbers greater than 1024 for your business-critical applications.

You may have to open up multiple ports and these ports could also be used to gain unauthorized entry into your datacenter.

You may not be able to assign the correct port to your business-critical applications.

You may not be able to open up enough ports for your business-critical applications which will increase the attack surface area.

QUESTION 70
Match each tunneling protocol to its definition.

QUESTION 71
Which type of malware replicates itself to spread rapidly through a computer network?

ransomware

Trojan horse

virus

worm

QUESTION 72
Which term describes data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center?

North-South traffic

Intrazone traffic

East-West traffic

Interzone traffic

QUESTION 73
What protocol requires all routers in the same domain to maintain a map of the network?

EIGRP

Static

RIP

OSPF

QUESTION 74
Based on how much is managed by the vendor, where can CaaS be situated in the spread of cloud computing services?

between PaaS and FaaS

between IaaS and PaaS

between On-Prem and IaaS

between FaaS and Serverless

QUESTION 75
Which three layers of the OSI model correspond to the Application Layer (L4) of the TCP/IP model?

Session, Transport, Network

Application, Presentation, and Session

Physical, Data Link, Network

Data Link, Session, Transport

QUESTION 76
What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake?

connectors and interfaces

infrastructure and containers

containers and developers

data center and UPS