Palo Alto Networks Certified Cybersecurity Practitioner - PCCP FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What should a security operations engineer do if they are presented with an encoded string during an incident investigation?

A. Save it to a new file and run it in a sandbox. B. Decode the string and continue the investigation. C. Run it against VirusTotal. D. Append it to the investigation notes but do not alter it.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

What differentiates SOAR from SIEM?

A. SOAR platforms collect data and send alerts. B. SOAR platforms filter alerts with their broader coverage of security incidents. C. SOAR platforms integrate automated response into the investigation process. D. SOAR platforms focus on analyzing network traffic.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

In SecOps, what are two of the components included in the identify stage? (Choose two.)

A. Content Engineering B. Change Control C. Breach Response D. Initial Research

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Which technology helps Security Operations Center (SOC) teams identify heap spray attacks on company- owned laptops?

A. CVVP B. EDR C. ASM D. CSPM

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

What is the function of an endpoint detection and response (EDR) tool?

A. To provide organizations with expertise for monitoring network devices B. To ingest alert data from network devices C. To monitor activities and behaviors for investigation of security incidents on user devices D. To integrate data from different products in order to provide a holistic view of security posture

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

The seventy of an attack needs to be escalated.
What needs to be in place in order for the security operations team to properly inform various units within the enterprise of the issue?

A. Corporate Executive Listserv B. Interface Agreement C. Security Breach Blog D. FAO Incident Site -

Discussion 0

Correct Answer: B Vote an answer

Question 7

Which option is a Prisma Access security service?

A. Software-defined wide-area networks (SD-WANs) B. Compute Security C. Virtual Private Networks (VPNs) D. Firewall as a Service (FWaaS)

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which IoT connectivity technology is provided by satellites?

A. 4G/LTE B. VLF C. L-band D. 2G/2.5G

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which type of system collects data and uses correlation rules to trigger alarms?

A. UEBA B. SIEM C. SOAR D. SIM

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?

A. SIEM B. STEP C. SOAR D. XDR

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

How does Cortex XSOAR Threat Intelligence Management (TIM) provide relevant threat data to analysts?

A. It performs SSL decryption to give visibility into user traffic. B. It creates an encrypted connection to the company's data center. C. II automates the ingestion and aggregation of indicators. D. II prevents sensitive data from leaving the network.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

Which of these ports is normally associated with HTTPS?

A. 5050 B. 443 C. 80 D. 25

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

Which IPsec feature allows device traffic to go directly to the Internet?

A. Split tunneling B. d.Authentication Header (AH) C. Diffie-Hellman groups D. IKE Security Association

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

What is required for a SIEM to operate correctly to ensure a translated flow from the system of interest to the SIEM data lake?

A. containers and developers B. data center and UPS C. connectors and interfaces D. infrastructure and containers

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).