PCCET Exam Questions

Which option is a sequence of events that an attacker would perform to infiltrate a network and steal data?

Which application types are not provided by IT but are allowed with restrictions because of their business benefits?

How does Cortex XSOAR improve the efficiency of security operations?

Which two malware types can replicate themselves? (Choose two.)

What inspects data that is egressing a network and prevents certain sensitive data - based on defined policies - from leaving the network?

Which technique is used to limit information about lost or stolen mobile devices?

Which security model relies on the assumption that everything on the internal network can be trusted?

What are three capabilities of mobile device management? (Choose three.)

What is the goal of a watering hole attack?

Which capability of the network-as-a-service layer uses the philosophy of "never trust, always verify"?

What is the port for SMTP?

Which law strengthens data protection for EU residents and addresses the export of personal data outside the EU?

Which type of firewall configuration should be deployed to protect north-south traffic?

What does the MITRE ATT&CK matrix techniques contain?

Which network is using a subnet mask of 255.255.255.192?

In a Software-as-a-Service (SaaS) environment, which two data exposures result from well- intentioned end users? (Choose two.)

Which core NGFW subscription service defends networks from advanced persistent threats (APTs)?

Before incorporating the DevSecOps process, when was security applied in the software- development lifecycle?

Which protocol is responsible for the translation of an IP address to a MAC address?

In what way does a DDoS attack differ from a DoS attack?

Which two tools are used for both DevOps and software development? (Choose two.)

Network isolation can be achieved using what kind of logical network attribute?

What is the function of SOAR?

Which endpoint security solution protects against malicious software designed to invade a device and collect user data?

Network vulnerability scanners and analyzers, such as Nessus and Wireshark, are used in which step of the cyberattack lifecycle?

How can Cortex XSIAM reduce incident response times dramatically?

What is the recommended method for collecting security logs from multiple endpoints?

What does "forensics" refer to in a Security Operations process?

If an endpoint does not know how to reach its destination, what path will it take to get there?

A user is given access to a service that gives them access to cloud-hosted physical and virtual servers, storage, and networking. Which NIST cloud service model is this?

What is a key benefit of Cortex XDR?

Which Palo Alto Networks subscription dynamically discovers and maintains a real-time inventory of devices on your network?

Which method is used to enumerate vulnerabilities, services, and applications?

Which encryption protocol is most commonly used in site-to-site or device-to-device VPN connections?

In the Transport layer of the OSI model, what is a protocol data unit (PDU) called?

Network traffic capture and endpoint data capture are elements of which pillar of SecOps?

Which technique uses file sharing or an instant messenger client such as Meebo running over Hypertext Transfer Protocol (HTTP)?

What type of area network connects end-user devices?

What should a security operations engineer do if they are presented with an encoded string during an incident investigation?

What is the primary purpose of a case management system?

What are three benefits of the cloud native security platform? (Choose three.)

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

Which native Windows application can be used to inspect actions taken at a specific time?

Which of the following is a Routed Protocol?

What are the two most prominent characteristics of the malware type rootkit? (Choose two.)

What is a key method used to secure sensitive data in Software-as-a-Service (SaaS) applications?

In the network diagram below, which device is the router?

Which SOAR feature coordinates across technologies, security teams, and external users for centralized data visibility and action?

Which feature of the VM-Series firewalls allows them to fully integrate into the DevOps workflows and CI/CD pipelines without slowing the pace of business?

You received an email, allegedly from a bank, that asks you to click a malicious link to take action on your account. Which type of attack is this?