Free Palo Alto Networks Certified Cybersecurity Practitioner Exam PCCP Exam Practice Test

Which activity is a technique in the MITRE ATT&CK framework?

• Credential access
• Lateral movement
• Resource development
• Account discovery

Which feature is part of an intrusion prevention system (IPS)?

• API-based coverage of apps
• Automated security actions
• Protection of data at rest
• Real-time web filtering

What are two characteristics of an advanced persistent threat (APT)? (Choose two.)

• Multiple attack vectors
• Repeated pursuit of objective
• Reduced interaction time
• Tendency to isolate hosts

What are two limitations of signature-based anti-malware software? (Choose two.)

• It is unable to detect polymorphic malware.
• It requires samples lo be buffered
• It uses a static file for comparing potential threats.
• It only uses packet header information.

Which technology secures software-as-a-service (SaaS) applications and network data, and also enforces compliance policies for application access?

• DLP
• CASB
• DNS Security
• URL filtering

What are two common lifecycle stages for an advanced persistent threat (APT) that is infiltrating a network? (Choose two.)

• Lateral movement
• Communication with covert channels
• Deletion of critical data
• Privilege escalation

What is an advantage of virtual firewalls over physical firewalls for internal segmentation when placed in a data center?

• They are dynamically scalable.
• They possess unlimited throughput capability.
• They are able to prevent evasive threats.
• They have failover capability.

Which two statements apply to SaaS financial botnets? (Choose two.)

• They are larger than spamming or DDoS botnets.
• They are sold as kits that allow attackers to license the code.
• They are a defense against spam attacks.
• They are used by attackers to build their own botnets.

What are two functions of an active monitoring system? (Choose two.)

• Preventing specific changes from being affected in the system
• Determining system health using unaltered system data
• Detecting micro-services in a default configuration
• Using probes to establish potential load issues

Which tool's analysis data gives security operations teams insight into their environment's risks from exposed services?

• IIDP
• IAM
• SIM
• Xpanse