PCCP Exam Questions

Which technology helps Security Operations Center (SOC) teams identify heap spray attacks on company-owned laptops?

What are two common lifecycle stages for an advanced persistent threat (APT) that is infiltrating a network? (Choose two.)

A high-profile company executive receives an urgent email containing a malicious link. The sender appears to be from the IT department of the company, and the email requests an upd...

Which next-generation firewall (NGFW) deployment option provides full application visibility into Kubernetes environments?

Which type of firewall should be implemented when a company headquarters is required to have redundant power and high processing power?

Which statement describes the process of application allow listing?

Which component of the AAA framework verifies user identities so they may access the network?

Which capability does Cloud Security Posture Management (CSPM) provide for threat detection within Prisma Cloud?

Which type of system collects data and uses correlation rules to trigger alarms?

What is the purpose of host-based architectures?

What is the function of an endpoint detection and response (EDR) tool?

What type of attack redirects the traffic of a legitimate website to a fake website?

Which two processes are critical to a security information and event management (SIEM) platform? (Choose two.)

Which Palo Alto Networks solution has replaced legacy IPS solutions?

Which type of system is a user entity behavior analysis (UEBA) tool?

What is a function of SSL/TLS decryption?

Which feature is part of an intrusion prevention system (IPS)?

What are two capabilities of identity threat detection and response (ITDR)? (Choose two.)

Which type of attack involves sending data packets disguised as queries to a remote server, which then sends the data back to the attacker?

Which service is encompassed by serverless architecture?

Which architecture model uses virtual machines (VMs) in a public cloud environment?

Which two statements apply to SaaS financial botnets? (Choose two.)

What is an event-driven snippet of code that runs on managed infrastructure?

Which type of attack obscures its presence while attempting to spread to multiple hosts in a network?

What is a dependency for the functionality of signature-based malware detection?

When does a TLS handshake occur?

Which characteristic of advanced malware makes it difficult to detect?

Which type of attack includes exfiltration of data as a primary objective?

What is an operation of an Attack Surface Management (ASM) platform?

What are two advantages of security orchestration, automation, and response (SOAR)? (Choose two.)

Which component of cloud security uses automated testing with static application security testing (SAST) to identify potential threats?

Which technology secures software-as-a-service (SaaS) applications and network data, and also enforces compliance policies for application access?

Which feature of cloud-native security platforms (CNSPs) focuses on protecting virtual machine (VM), container, and serverless deployments against application-level attacks during...

Which component of cloud security is used to identify misconfigurations during the development process?

What is a purpose of workload security on a Cloud Native Security Platform (CNSP)?

What is required for an effective Attack Surface Management (ASM) process?

Which component of the AAA framework regulates user access and permissions to resources?

What are two limitations of signature-based anti-malware software? (Choose two.)

What would allow a security team to inspect TLS encapsulated traffic?

What is an advantage of virtual firewalls over physical firewalls for internal segmentation when placed in a data center?

What is a reason IoT devices are more susceptible to command-and-control (C2) attacks?

Which tool's analysis data gives security operations teams insight into their environment's risks from exposed services?

Why is compliance management important in cloud security?

What differentiates a SIEM from a SOAR platform?

Which of the following best describes a DDoS botnet?

How does DNS Security prevent cyber threats?

Which methodology does Identity Threat Detection and Response (ITDR) use?

Which technology grants enhanced visibility and threat prevention locally on a device?

What are two examples of an attacker using social engineering? (Choose two.)

Which two services does a managed detection and response (MDR) solution provide? (Choose two.)