PCCET Exam Questions

What is the meaning of a SaaS application that is advertised as being HIPPA compliant?

Ten containers running on five virtual machines are spread between two type 2 hypervisors. How many OS instances are you running?

Who is responsible for the security settings in an enterprise SaaS application?

If you are responsible for the application's security but not the operating system's security, which cloud computing service model are you using?

Which kind of security always is the responsibility of the cloud customer?

Which group is likely to attack indiscriminately, whether you are a valuable target or not?

Which stage of the cyberattack lifecycle can be identified by port scans from external sources?

Which stage of the cyberattack lifecycle involves querying public databases and testing exploits in the attacker's internal network?

Which step is involved in getting malware to run on the inside of the targeted organization?

Which type of attack includes an email advertisement for a dry cleaning service?

Your CFO receives an email with her name that claims to be the company's bank and tells her to click the link https://chase.bankofamerica.mysite.ru. Which type of attack is this?

What does Cortex XSOAR use to automate security processes?

Which two advantages does endpoint protection technology have over network traffic analysis? (Choose two.)

What is the order in which the endpoint checks if a new program is safe?

Which three options partially comprise the six elements of SecOps? (Choose three.)

What are the two advantages of SASE? (Choose two.)

Which action is part of the compute security pillar?

What does the first phase of implementing security in virtualized data centers consist of?

Which systems must you secure to ensure compliance with security standards?

Which cloud use model allows you to use containers without having to manage the underlying hardware and virtualization layers, but still lets you access the underlying virtualizati...

You are responsible for the security of the application, the runtime, and the VM operating system. Which cloud deployment model are you using?

A news company can serve all requests from their data center 95% of the time. However, some days there is a huge demand for news updates. Which NIST deployment model is recommended...

An international organization has more than 100 firewalls in 50 locations. Which Panorama deployment mode would the organization install in multiple locations (beyond the need for...

Which NGFW core subscription allows your firewall to block users when they attempt to submit their credentials to a phishing site?

Only one manager can get company checks. Only a different manager can sign checks. This example describes which principle?

Identify a weakness of a perimeter-based network security strategy to protect an organization's endpoint systems.

Based on how much is managed by the vendor, where can CaaS be situated in the spread of cloud computing services?

Which attacker profile acts independently or as part of an unlawful organization?

Drag and Drop Question Match each tool to its capability. Answer:

What is the proper subnet mask for the network 192.168.55.0/27?

A security team is looking for a solution that will offer them real-time analysis of security logs as well as compliance-management and event-correlation features. Which solution i...

Which TCP/IP sub-protocol operates at Layer4 of the OSI model?

What protocol requires all routers in the same domain to maintain a map of the network?

A doctor receives an email about her upcoming holiday in France. When she clicks the URL website link in the email, the connection is blocked by her office firewall because it's a...

With regard to cloud-native security in layers, what is the correct order of the four C's from the top (surface) layer to the bottom (base) layer?

What differentiates Docker from a bare metal hypervisor?

On which security principle does virtualization have positive effects?

What is a common characteristic of serverless and containers?

What should a security operations engineer de when reviewing suspicious, but successful, login activity?

Which regulation is specifically mandated to payment account data security?

For which three platforms does the SASE solution provide consistent security services and access? (Choose three.)

Which type of file sharing occurs when an employee shares a file with another user who then shares with other people who shouldn't have access?

Which type of organization benefits most from the features SD-WAN offers?

What is an example of a Web 3.0 application?

What are two effective ways to prevent port scanning? (Choose two.)

Which two characteristics are associated with a security zone? (Choose two.)

Which protocol is used by both internet service providers (ISPs) and network service providers (NSPs)?

Which solution was designed to help organizations embrace cloud and mobility by providing network and network security services from a common cloud-delivered architecture?

An administrator has just completed the "Consolidating servers within trust levels" phase of hybrid data-center security. Which phase does the administrator perform next?

When developing SOC business objectives, what is the primary purpose behind planning?