PCCET Online Practice Questions and Answers

Correct Answer: B

Security operations (SecOps) is a necessary function for protecting the digital way of life, for global businesses and customers. SecOps requires continuous improvement in operations to handle fast- evolving threats. SecOps needs to arm security operations professionals with high-fidelity intelligence, contextual data, and automated prevention workflows to quickly identify and respond to these threats. SecOps must leverage automation to reduce strain on analysts and execute the Security Operation Center's (SOC) mission to identify, investigate, and mitigate threats.

Correct Answer: C

North-south refers to data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center. North-south traffic is secured by one or more physical form factor perimeter edge firewalls.

Correct Answer: ACE

The six pillars include:

1.

Business (goals and outcomes)

2.

People (who will perform the work)

3.

Interfaces (external functions to help achieve goals)

4.

Visibility (information needed to accomplish goals)

5.

Technology (capabilities needed to provide visibility and enable people)

6.

Processes (tactical steps required to execute on goals) All elements must tie back to the business itself and the goals of the security operations

Correct Answer: A

"Or split tunneling can be configured to allow internet traffic from the device to go directly to the internet, while other specific types of traffic route through the IPsec tunnel, for acceptable protection with much less performance degradation."

Correct Answer: B

Correct Answer: B

Correct Answer: D

Attack communication traffic is usually hidden with various techniques and tools, including: Encryption with SSL, SSH (Secure Shell), or some other custom or proprietary encryption Circumvention via proxies, remote access tools, or tunneling. In some instances, use of cellular networks enables complete circumvention of the target network for attack C2 traffic. Port evasion using network anonymizers or port hopping to traverse over any available open ports Fast Flux (or Dynamic DNS) to proxy through multiple infected endpoints or multiple, ever-changing C2 servers to reroute traffic and make determination of the true destination or attack source difficult DNS tunneling is used for C2 communications and data infiltration

Correct Answer: D

DevOps is not:

A combination of the Dev and Ops teams: There still are two teams; they just operate in a communicative, collaborative way.

Its own separate team: There is no such thing as a "DevOps engineer." Although some companies may appoint a "DevOps team" as a pilot when trying to transition to a DevOps culture, DevOps refers to a culture where developers, testers,

and operations personnel cooperate throughout the entire software delivery lifecycle. A tool or set of tools: Although there are tools that work well with a DevOps model or help promote DevOps culture, DevOps ultimately is a strategy, not a

tool. Automation: Although automation is very important for a DevOps culture, it alone does not define DevOps.

Correct Answer: D

From a business perspective, XDR platforms enable organizations to prevent successful cyberattacks as well as simplify and strengthen security processes.

Correct Answer: D

Cortex XSOAR enhances Security Operations Center (SOC) efficiency with the world's most comprehensive operating platform for enterprise security. Cortex XSOAR unifies case management, automation, real-time collaboration, and native threat intel management in the industry's first extended security orchestration, automation, and response (SOAR) offering.