Cybersecurity-Practitioner by Palo Alto Networks Valid Free Exam Practice Test

Question 1

Which type of attack includes exfiltration of data as a primary objective?

A. Advanced persistent threat B. Denial-of-service (DoS) C. Watering hole attack D. Cross-Site Scripting (XSS)

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which type of attack obscures its presence while attempting to spread to multiple hosts in a network?

A. Reconnaissance B. Denial of service C. Advanced malware D. Smishing

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

A user is given access to a service that gives them access to cloud-hosted physical and virtual servers, storage, and networking.
Which NIST cloud service model is this?

A. PaaS B. SaaS C. IaaS D. CaaS

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which of the following is a service that allows you to control permissions assigned to users in order for them to access and utilize cloud resources?

A. Lightweight Directory Access Protocol (LDAP) B. User and Entity Behavior Analytics (UEBA) C. Identity and Access Management (IAM) D. User-ID

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Which two pieces of information are considered personally identifiable information (PII)? (Choose two.)

A. Profession B. Birthplace C. Login 10 D. Name

Correct Answer: B,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

What are two examples of an attacker using social engineering? (Choose two.)

A. Leveraging open-source intelligence to gather information about a high-level executive B. Compromising a website and configuring it to automatically install malicious files onto systems that visit the page C. Convincing an employee that they are also an employee D. Acting as a company representative and asking for personal information not relevant to the reason for their call

Correct Answer: C,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Which scenario highlights how a malicious Portable Executable (PE) file is leveraged as an attack?

A. Embedding the file inside a pdf to be downloaded and installed B. Corruption of security device memory spaces while file is in transit C. Laterally transferring the file through a network after being granted access D. Setting up a web page for harvesting user credentials

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

Which of the following is an AWS serverless service?

A. Lambda B. Beta C. Kappa D. Delta

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Which two statements describe the Jasager attack? (Choose two.)

A. It actively responds to beacon reguests. B. The attacker needs to be wilhin close proximity of the victim. C. It tries to get victims to conned at random. D. The victim must manually choose the attacker s access point

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

Which security tool provides policy enforcement for mobile users and remote networks?

A. Service connection B. Digital experience management C. Prisma Access D. Prisma Cloud

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

Layer 4 of the TCP/IP Model corresponds to which three Layer(s) of the OSI Model? (Choose three.)

A. Presentation B. Session C. Network D. Transport E. Application

Correct Answer: A,B,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 12

At which layer of the OSI model are routing protocols defined?

A. Physical B. Network C. Data Link D. Transport

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

The customer is responsible only for which type of security when using a SaaS application?

A. infrastructure B. data C. physical D. platform

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 14

The seventy of an attack needs to be escalated.
What needs to be in place in order for the security operations team to properly inform various units within the enterprise of the issue?

A. Security Breach Blog B. Interface Agreement C. FAO Incident Site - D. Corporate Executive Listserv

Correct Answer: B

Question 15

Systems that allow for accelerated incident response through the execution of standardized and automated playbooks that work upon inputs from security technology and other data flows are known as what?

A. STEP B. XDR C. SIEM D. SOAR

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Palo Alto Networks Cybersecurity Practitioner - Cybersecurity-Practitioner Exam Practice Test