最新Palo Alto Networks PCCET一発合格！試験リアル問題集最新の[2023年04月]
良質なPCCET問題集はここFast2test問題はあなたの合格させて見せます。明るい未来はクリックから始まる！
質問 # 85
Which three services are part of Prisma SaaS? (Choose three.)
- A. Data Loss Prevention
- B. Data Exposure Control
- C. Threat Prevention
- D. Denial of Service
- E. DevOps
正解：A、B、C
質問 # 86
In which phase of the cyberattack lifecycle do attackers establish encrypted communication channels back to servers across the internet so that they can modify their attack objectives and methods?
- A. actions on the objective
- B. exploitation
- C. command and control
- D. installation
正解：C
解説：
Command and Control: Attackers establish encrypted communication channels back to command-and-control (C2) servers across the internet so that they can modify their attack objectives and methods as additional targets of opportunity are identified within the victim network, or to evade any new security countermeasures that the organization may attempt to deploy if attack artifacts are discovered.
質問 # 87
In the attached network diagram, which device is the switch?
- A. B
- B. C
- C. A
- D. D
正解：D
質問 # 88
How can local systems eliminate vulnerabilities?
- A. Test and deploy patches on a focused set of systems.
- B. Perform an attack on local systems.
- C. Patch systems and software effectively and continuously.
- D. Create preventative memory-corruption techniques.
正解：A
質問 # 89
Match the Identity and Access Management (IAM) security control with the appropriate definition.
正解：
解説：
質問 # 90
Routing Information Protocol (RIP), uses what metric to determine how network traffic should flow?
- A. Hop Count
- B. Path Vector
- C. Shortest Path
- D. Split Horizon
正解：A
解説：
Explanation
Routing Information Protocol (RIP) is an example of a distance-vector routing protocol that uses hop count as its routing metric. To prevent routing loops, in which packets effectively get stuck bouncing between various router nodes, RIP implements a hop limit of 15, which limits the size of networks that RIP can support. After a data packet crosses 15 router nodes (hops) between a source and a destination, the destination is considered unreachable.
質問 # 91
On which security principle does virtualization have positive effects?
- A. integrity
- B. non-repudiation
- C. availability
- D. confidentiality
正解：C
質問 # 92
Which type of LAN technology is being displayed in the diagram?
- A. Spine Leaf Topology
- B. Star Topology
- C. Mesh Topology
- D. Bus Topology
正解：B
質問 # 93
Which three layers of the OSI model correspond to the Application Layer (L4) of the TCP/IP model?
- A. Data Link, Session, Transport
- B. Application, Presentation, and Session
- C. Session, Transport, Network
- D. Physical, Data Link, Network
正解：B
解説：
Explanation
Application (Layer 4 or L4): This layer loosely corresponds to Layers 5 through 7 of the OSI model.
Transport (Layer 3 or L3): This layer corresponds to Layer 4 of the OSI model.
Internet (Layer 2 or L2): This layer corresponds to Layer 3 of the OSI model.
Network Access (Layer 1 or L1): This layer corresponds to Layers 1 and 2 of the OSI model
質問 # 94
From which resource does Palo Alto Networks AutoFocus correlate and gain URL filtering intelligence?
- A. PAN-DB
- B. Unit 52
- C. BrightCloud
- D. MineMeld
正解：A
解説：
When you enable URL Filtering, all web traffic is compared against the URL Filtering database, PAN-DB, which contains millions of URLs that have been grouped into about 65 categories.
質問 # 95
What differentiates knowledge-based systems from behavior-based systems?
- A. Behavior-based systems pull from a previously stored database that distinguishes "bad".
- B. Behavior-based systems find the data that knowledge-based systems store.
- C. Knowledge-based systems pull from a previously stored database that distinguishes "bad". C.
Knowledge-based systems try to find new, distinct traits to find "bad" things.
正解：A
質問 # 96
From which resource does Palo Alto Networks AutoFocus correlate and gain URL filtering intelligence?
- A. PAN-DB
- B. Unit 52
- C. BrightCloud
- D. MineMeld
正解：A
解説：
Explanation
When you enable URL Filtering, all web traffic is compared against the URL Filtering database, PAN-DB, which contains millions of URLs that have been grouped into about 65 categories.
質問 # 97
Which of the following is an AWS serverless service?
- A. Beta
- B. Lambda
- C. Delta
- D. Kappa
正解：B
解説：
Examples of serverless environments include Amazon Lambda and Azure Functions. Many PaaS offerings, such as Pivotal Cloud Foundry, also are effectively serverless even if they have not historically been marketed as such. Although serverless may appear to lack the container-specific, cloud native attribute, containers are extensively used in the underlying implementations, even if those implementations are not exposed to end users directly.
質問 # 98
A user is provided access over the internet to an application running on a cloud infrastructure. The servers, databases, and code of that application are hosted and maintained by the vendor.
Which NIST cloud service model is this?
- A. SaaS
- B. IaaS
- C. PaaS
- D. CaaS
正解：A
解説：
Explanation
SaaS - User responsible for only the data, vendor responsible for rest
質問 # 99
Which TCP/IP sub-protocol operates at the Layer7 of the OSI model?
- A. NFS
- B. MAC
- C. UDP
- D. SNMP
正解：D
質問 # 100
SecOps consists of interfaces, visibility, technology, and which other three elements? (Choose three.)
- A. Accessibility
- B. Business
- C. People
- D. Understanding
- E. Processes
正解：B、C、E
質問 # 101
Anthem server breaches disclosed Personally Identifiable Information (PII) from a number of its servers. The infiltration by hackers was attributed to which type of vulnerability?
- A. exploitation of an unpatched security vulnerability
- B. a phishing scheme that captured a database administrator's password
- C. an intranet-accessed contractor's system that was compromised
- D. access by using a third-party vendor's password
正解：B
質問 # 102
Which option is an example of a North-South traffic flow?
- A. Lateral movement within a cloud or data center
- B. Client-server interactions that cross the edge perimeter
- C. Traffic between an internal server and internal user
- D. An internal three-tier application
正解：B
解説：
Explanation
North-south refers to data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center. North-south traffic is secured by one or more physical form factor perimeter edge firewalls.
質問 # 103
Which NGFW feature is used to provide continuous identification, categorization, and control of known and previously unknown SaaS applications?
- A. Content-ID
- B. Device-ID
- C. App-ID
- D. User-ID
正解：C
解説：
Explanation
App-ID™ technology leverages the power of the broad global community to provide continuous identification, categorization, and granular risk-based control of known and previously unknown SaaS applications, ensuring new applications are discovered automatically as they become popular.
質問 # 104
What are the two most prominent characteristics of the malware type rootkit? (Choose two.)
- A. It encrypts user data.
- B. It cannot be detected by antivirus because of its masking techniques.
- C. It takes control of the operating system.
- D. It steals personal information.
正解：B、C
質問 # 105
Which Palo Alto subscription service identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment?
- A. DNS Security
- B. Threat Prevention
- C. URL Filtering
- D. WildFire
正解：D
解説：
Explanation
"The WildFire cloud-based malware analysis environment is a cyber threat prevention service that identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment. WildFire automatically disseminates updated protections in near-real time to immediately prevent threats from spreading; this occurs without manual intervention"
質問 # 106
Which protocol is used by both internet service providers (ISPs) and network service providers (NSPs)?
- A. Split horizon
- B. Open Shortest Path First (OSPF)
- C. Border Gateway Protocol (BGP)
- D. Routing Information Protocol (RIP)
正解：C
質問 # 107
Which network firewall operates up to Layer 4 (Transport layer) of the OSI model and maintains information about the communication sessions which have been established between hosts on trusted and untrusted networks?
- A. Static packet-filter
- B. Group policy
- C. Stateless
- D. Stateful
正解：D
解説：
Stateful packet inspection firewalls Second-generation stateful packet inspection (also known as dynamic packet filtering) firewalls have the following characteristics:
* They operate up to Layer 4 (Transport layer) of the OSI model and maintain state information about the communication sessions that have been established between hosts on the trusted and untrusted networks.
* They inspect individual packet headers to determine source and destination IP address, protocol (TCP, UDP, and ICMP), and port number (during session establishment only) to determine whether the session should be allowed, blocked, or dropped based on configured firewall rules.
* After a permitted connection is established between two hosts, the firewall creates and deletes firewall rules for individual connections as needed, thus effectively creating a tunnel that allows traffic to flow between the two hosts without further inspection of individual packets during the session.
* This type of firewall is very fast, but it is port-based and it is highly dependent on the trustworthiness of the two hosts because individual packets aren't inspected after the connection is established.
質問 # 108
Which characteristic of serverless computing enables developers to quickly deploy application code?
- A. Uploading the application code itself, without having to provision a full container image or any OS virtual machine components
- B. Using cloud service spot pricing to reduce the cost of using virtual machines to run their application code
- C. Uploading cloud service autoscaling services to deploy more virtual machines to run their application code based on user demand
- D. Using Container as a Service (CaaS) to deploy application containers to run their code.
正解：A
解説：
"In serverless apps, the developer uploads only the app package itself, without a full container image or any OS components. The platform dynamically packages it into an image, runs the image in a container, and (if needed) instantiates the underlying host OS and VM and the hardware required to run them."
質問 # 109
Which tool supercharges security operations center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security?
- A. Prisma SAAS
- B. WildFire
- C. Cortex XSOAR
- D. Cortex XDR
正解：C
解説：
Explanation
Cortex XSOAR enhances Security Operations Center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security. Cortex XSOAR unifies case management, automation, real-time collaboration, and native threat intel management in the industry's first extended security orchestration, automation, and response (SOAR) offering.
質問 # 110
......
Palo Alto Networks練習テストエンジンPCCET問題：https://drive.google.com/open?id=1ixY0jr0qmxvJdWBoU5auZhPthfVcWJwf
試験合格保証有効なPalo Alto Networks PCCET問題集：https://jp.fast2test.com/PCCET-premium-file.html