PCNSA Question #93: Real Exam Question with Answer & Explanation

Question

You notice that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would you need to monitor and block to mitigate the malicious activity?

Options

• Abranch office traffic
• Bnorth-south traffic
• Cperimeter traffic
• Deast-west traffic

Explanation

To mitigate malicious lateral movement activity within the network, the focus must be on monitoring and blocking "east-west traffic" as this refers to communication between internal systems.

Common mistakes.

• A. "Branch office traffic" refers to traffic between a main office and a branch office, which can involve both north-south and east-west components but is not the primary definition for internal lateral movement.
• B. "North-south traffic" refers to traffic flowing between the internal network and external networks, which is typically protected by perimeter firewalls and not the primary focus for internal lateral movement.
• C. "Perimeter traffic" is synonymous with north-south traffic, focusing on the boundary between internal and external networks, and does not address lateral movement within the internal network.

Concept tested. Network Traffic Patterns and Lateral Movement Mitigation

Reference. https://docs.paloaltonetworks.com/prisma/prisma-cloud/23-1/prisma-cloud-admin/cloud-network-security/cn-traffic-monitoring-and-logging/cn-network-traffic-types

No community discussion yet for this question.