PCCSA.prepaway.premium.exam.
50q
Number: PCCSA
Passing Score: 800
Time Limit: 120 min
File Version: 1.0
PCCSA
Palo Alto Networks Certified Cybersecurity Associate
Version 1.0
Exam A
QUESTION 1
Which type of adversary would commit cybercrimes with the authorization of their country’s government?
A. state-sponsored
B. hacktivist
C. gray hat
D. white hat
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 2
When a company chooses to deploy a branch location with antivirus software, which risk model are they using
to manage risk?
A. limiting
B. assuming
C. transferring
D. avoiding
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 3
Which option describes a characteristic of a distributed denial-of-service attack?
A. uses multiple types of malware to corrupt system services
B. uses a single remote host to delete data from multiple target servers
C. uses a single remote host to flood a target network with traffic
D. uses a botnet to flood traffic to a target network
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 4
What is a component of a public key infrastructure?
A. Key Distribution Center
B. KDC ticket
C. SSH key
D. certificate authority
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 5
From which resource can a Palo Alto Networks firewall get URL category information for URLs whose
categories cannot be found on the firewall?
A. App-ID database
B. WildFire
C. PDF file
D. PAN-DB database
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 6
What does a hypervisor enable?
A. high-speed searching of already aggregated security log files
B. high-speed aggregation and viewing of security log files
C. multiple physical machines to be configured into a high-performance cluster
D. multiple guest operating systems to run on a single physical machine
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 7
DRAG DROP
Match the Palo Alto Networks Wild Fire analysis verdict with its definition.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
Reference: https://docs.paloaltonetworks.com/wildfire/8-0/wildfire-admin/wildfire-overview/wildfire-concepts/
verdicts
QUESTION 8
Identify a weakness of a perimeter-based network security strategy to protect an organization’s endpoint
systems.
A. It cannot identify command-and-control traffic.
B. It cannot monitor all potential network ports.
C. It assumes that all internal devices are untrusted.
D. It assumes that every internal endpoint can be trusted.
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 9
DRAG DROP
Match each option with the term it describes.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 10
Which type of security device uses a single-pass, parallel processor hardware architecture to accelerate
content inspection?
A. unified threat management
B. stateless firewalls
C. next-generation firewall
D. PoS-based firewall
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 11
Which well-known port is associated with the Simple Mail Transfer Protocol?
A. 143
B. 25
C. 997
D. 40
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 12
DRAG DROP
Match the common TCP/IP protocol with its corresponding port(s).
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 13
To which type of organization does the PCI DSS apply?
A. any organization that accepts, transmits, or stores any cardholder data
B. organizations that only accept cardholder data regardless of size or number of transactions
C. only organization larger than 100 employees that accept, transmit, or store any cardholder data
D. organizations that only transmit data regardless of size or number of transactions
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 14
DRAG DROP
Match the task for server settings in group mapping with its order in the process.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 15
Which mobile device management feature prevents jailbreaking or rooting?
A. software distribution
B. malware protection
C. policy enforcement
D. data loss prevention
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 16
DRAG DROP
Match the tool to its capability.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 17
Which device would an Evil Twin attack use to lure the victim to connect to the attack surface network?
A. switch
B. firewall
C. router
D. access point
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 18
What are two methods to securely transmit personally identifiable information? (Choose two.)
A. data checksumming
B. data fragmentation
C. data encryption
D. encrypted tunnels
Correct Answer: CD
Section: (none)
Explanation
Explanation/Reference:
QUESTION 19
What is the primary purpose of using encryption as part of your network data security architecture?
A. authorization
B. confidentiality
C. integrity
D. authentication
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 20
Which security component should be used to prevent a malware attack delivered by USB drive?
A. endpoint security
B. password security
C. physical security
D. firewall security
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 21
DRAG DROP
Match each type of breach to its consequence.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 22
A firewall located on an organization’s network perimeter can be used to protect against which type of attack?
A. a malicious SaaS application file accessed from an unmanaged mobile phone
B. ransomware installed from an infected USB drive
C. malware installed on the laptop by a disgruntled employee
D. a malicious PDF file located on an internet website
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 23
Which Palo Alto Networks tool is used to prevent endpoint systems from running malware executables such as
viruses, trojans and rootkits?
A. AutoFocus
B. Traps
C. Expedition
D. App-ID
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 24
Which protocol converts voice into a digital signal?
A. IVO
B. VoIP
C. SNMP
D. IGMP
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 25
Which security component should you configure to block viruses not seen and blocked by the perimeter
firewall?
A. strong endpoint passwords
B. endpoint disk encryption
C. endpoint antivirus software
D. endpoint NIC ACLs
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 26
Which Palo Alto Networks product or feature includes machine learning to enhance security?
A. Panorama
B. MineMeld
C. Magnifier
D. User-ID
.
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 27
Which type of attack floods a target with ICMP requests?
A. route table poisoning
B. reconnaissance
C. IP spoofing
D. denial-of-service
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 28
Which type of attack floods a target with TCP SYN requests?
A. route table poisoning
B. reconnaissance
C. denial-of-service
D. IP spoofing
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 29
Which two components are part of a next-generation firewall security policy? (Choose two.)
A. role-based access controls
B. user identification
C. content identification
D. file permissions
Correct Answer: BC
Section: (none)
Explanation
Explanation/Reference:
QUESTION 30
Which type of malware is self-replicating but must first infect a host program and be executed by a user or
process?
.
A. vulnerability
B. worm
C. exploit
D. virus
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 31
You discover malware has corrupted the BIOS on your laptop. Which type of malware is this?
A. bootkit
B. exploit
C. rootkit
D. vulnerability
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 32
Which data security compliance standard is used to protect card holder data wherever it is processed, stored,
or transmitted?
A. Property Card Industry
B. Payment Card Industry
C. Personal Card Industry
D. Payment Club Industry
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 33
What does Palo Alto Networks Traps do first when an endpoint is asked to run an executable?
A. send the executable to WildFire
B. run a static analysis
C. run a dynamic analysis
D. check its execution policy
Correct Answer: D
Section: (none)
Explanation
.
Explanation/Reference:
QUESTION 34
What is the function of a hashing protocol?
A. encrypts data with encapsulation
B. establishes an unencrypted tunnel
C. establishes a secure tunnel
D. provides data integrity
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 35
Which two items operate at the network layer in the OSI network model? (Choose two.)
A. IP address
B. router
C. switch
D. MAC address
Correct Answer: AB
Section: (none)
Explanation
Explanation/Reference:
QUESTION 36
In which type of cloud computing service does an organization own and control application data, but not the
application?
A. platform as a service
B. computing as a service
C. infrastructure as a service
D. software as a service
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 37
You discover an infected email attachment that contains software code that attacks a known vulnerability in a
popular social networking application. This type of software code belongs to which type of malware category?
A. social engineering
B. virus
C. pharming
.
D. exploit
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 38
What is an example of a distance-vector routing protocol?
A. OSPF
B. BGP
C. RIP
D. IGRP
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 39
Which type of firewall monitors traffic streams from beginning to end?
A. circuit-level gateway
B. stateless
C. stateful
D. packet filter
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 40
Which option lists the correct sequence of a TCP three-way handshake?
A. SYN, ACK, SYN
B. SYN, SYN+ACK, ACK
C. SYN, ACK, FIN
D. SYN, SYN+ACK, FIN
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 41
.
Which two types of SaaS applications are allowed by an IT department? (Choose two.)
A. tolerated
B. certified
C. sanctioned
D. unsanctioned
Correct Answer: AC
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.paloaltonetworks.com/cyberpedia/saas-security
QUESTION 42
Which network method securely connects two sites across a public network?
A. VPN
B. VLAN
C. switch
D. router
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 43
Review the exhibit and identify the type of vulnerability or attack that is commonly used against this technology.
A. phishing
B. denial-of-service
C. code-injection
D. password cracking
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
.
QUESTION 44
When accessing an intranet website, a certificate error is received. What can be done to move past the
certificate error and ensure that the error is not received the next time the website is accessed?
A. install the website certificate into the web browser
B. request trusted access from the web developer
C. enable TLS 2.0 in the advanced options of the web browser
D. trust the web developer for the application
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 45
Assume that it is your responsibility to secure the software functioning at all layers in the exhibit.
Which cloud service model type is represented?
.
A. software as a service
B. platform as a service
C. infrastructure as a service
D. on-premises
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 46
Which security principle describes the practice of giving users the minimum rights to access the resources
necessary to do their jobs?
A. known privilege
B. least privilege
C. user privilege
D. lowest privilege
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 47
An attacker emails a malicious URL links to 50,000 email addresses. The email states that users can click the
link to view the latest celebrity news, but the link also secretly infects the user’s laptop. This scenario describes
which type of attack?
A. whailing
B. phishing
C. drive-by download
D. pharming
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 48
Company policy allows employees to access the internet. While searching for office supplies on the internet, a
corporate user mistypes a URL, connects to a malicious website, and unknowingly downloads malware.
Which action should have been taken to prevent the malware download but still allow user access to the
internet?
A. deploy a firewall with content filtering capabilities on the corporate perimeter
B. allow only encrypted HTTPS access to the internet
C. configure digital certificates for all users to authenticate internet downloads
.
D. permit web connections only to TCP port 443
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 49
What method can be used to guarantee that a document originates from you and no one else?
A. public key encryption, encrypting the document with the private key and making the public key available to
others
B. symmetric encryption, encrypting the document with the secret key and making a different secret key
available to others
C. symmetric encryption, encrypting the document with the secret key and making the same secret key
available to others
D. public key encryption, encrypting the document with the private key and making the private key available to
others
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 50
Which type of cloud computing deployment makes resources exclusively available to members of a single
organization?
A. local
B. private
C. hybrid
D. public
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
.
