Free Palo Alto Networks PCCP Exam Dumps Questions & Answers

Which component of the AAA framework verifies user identities so they may access the network?

• A.Accounting
• B.Authorization
• C.Allowance
• D.Authentication

Match each description to a Security Operating Platform key capability.

Correct Answer:

Explanation:

# Reduce the attack surface: Best-of-breed technologies that are natively integrated provide a prevention architecture that inherently reduces the attack surface. This type of architecture allows organizations to exert positive control based on applications, users, and content, with support for open communication, orchestration, and visibility.
# Prevent all known threats, fast: A coordinated security platform accounts for the full scope of an attack across the various security controls that compose the security posture, thus enabling organizations to quickly identify and block known threats.
# Detect and prevent new, unknown threats with automation: Security that simply detects threats and requires a manual response is too little, too late. Automated creation and delivery of near-real-time protections against new threats to the various security solutions in the organization' s environments enable dynamic policy updates. These updates are designed to allow enterprises to scale defenses with technology, rather than people.

What is an operation of an Attack Surface Management (ASM) platform?

• A.It detects and remediates misconfigured security settings in sanctioned SaaS applications through monitoring.
• B.It identifies and monitors the movement of data within, into, and out of an organization's network.
• C.It continuously identifies all internal and external internet-connected assets for potential attack vectors and exposures.
• D.It scans assets in the cloud space for remediation of compromised sanctioned SaaS applications.

Which statement describes a host-based intrusion prevention system (HIPS)?

• A.It is placed as a sensor to monitor all network traffic and scan for threats.
• B.It is installed on an endpoint and inspects the device.
• C.It analyzes network traffic to detect unusual traffic flows and new malware.
• D.It scans a Wi-Fi network for unauthorized access and removes unauthorized devices.

Which of the following is a service that allows you to control permissions assigned to users in order for them to access and utilize cloud resources?

• A.User-ID
• B.User and Entity Behavior Analytics (UEBA)
• C.Identity and Access Management (IAM)
• D.Lightweight Directory Access Protocol (LDAP)