NEW QUESTION 1
Which organizational function is responsible for security automation and eventual vetting of the solution to help ensure consistency through machine-driven responses to security issues?

• A. NetOps
• B. SecOps
• C. SecDevOps
• D. DevOps

Answer: B

NEW QUESTION 2
Which characteristic of serverless computing enables developers to quickly deploy application code?

• A. Uploading cloud service autoscaling services to deploy more virtual machines to run their application code based on user demand
• B. Uploading the application code itself, without having to provision a full container image or any OS virtual machine components
• C. Using cloud service spot pricing to reduce the cost of using virtual machines to run their application code
• D. Using Container as a Service (CaaS) to deploy application containers to run their code.

Answer: A

NEW QUESTION 3
Which type of Software as a Service (SaaS) application provides business benefits, is fast to deploy, requires minimal cost and is infinitely scalable?

• A. Benign
• B. Tolerated
• C. Sanctioned
• D. Secure

Answer: C

NEW QUESTION 4
Which Palo Alto Networks subscription service complements App-ID by enabling you to configure the next-generation firewall to identify and control access to websites and to protect your organization from websites hosting malware and phishing pages?

• A. Threat Prevention
• B. DNS Security
• C. WildFire
• D. URL Filtering

Answer: D

NEW QUESTION 5
Which IPsec feature allows device traffic to go directly to the Internet?

• A. Split tunneling
• B. Diffie-Hellman groups
• C. d.Authentication Header (AH)
• D. IKE Security Association

Answer: A

NEW QUESTION 6
How does adopting a serverless model impact application development?

• A. costs more to develop application code because it uses more compute resources
• B. slows down the deployment of application code, but it improves the quality of code development
• C. reduces the operational overhead necessary to deploy application code
• D. prevents developers from focusing on just the application code because you need to provision the underlying infrastructure to run the code

Answer: C

NEW QUESTION 7
Which option describes the “selective network security virtualization” phase of incrementally
transforming data centers?

• A. during the selective network security virtualization phase, all intra-host communication paths are strictly controlled
• B. during the selective network security virtualization phase, all intra-host traffic is forwarded to a Web proxy server
• C. during the selective network security virtualization phase, all intra-host traffic is encapsulated and encrypted using the IPSEC protocol
• D. during the selective network security virtualization phase, all intra-host traffic is load balanced

Answer: A

NEW QUESTION 8
DRAG DROP
Match the IoT connectivity description with the technology.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9
Which option is a Prisma Access security service?

• A. Compute Security
• B. Firewall as a Service (FWaaS)
• C. Virtual Private Networks (VPNs)
• D. Software-defined wide-area networks (SD-WANs)

Answer: B

NEW QUESTION 10
Which not-for-profit organization maintains the common vulnerability exposure catalog that is available through their public website?

• A. Department of Homeland Security
• B. MITRE
• C. Office of Cyber Security and Information Assurance
• D. Cybersecurity Vulnerability Research Center

Answer: B

NEW QUESTION 11
Which model would a customer choose if they want full control over the operating system(s) running on their cloud computing platform?

• A. SaaS
• B. DaaS
• C. PaaS
• D. IaaS

Answer: D

NEW QUESTION 12
DRAG DROP
Match each description to a Security Operating Platform key capability.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13
On an endpoint, which method should you use to secure applications against exploits?

• A. endpoint-based firewall
• B. strong user passwords
• C. full-disk encryption
• D. software patches

Answer: A

NEW QUESTION 14
Which option would be an example of PII that you need to prevent from leaving your enterprise network?

• A. Credit card number
• B. Trade secret
• C. National security information
• D. A symmetric encryption key

Answer: A

NEW QUESTION 15
Which option is an example of a North-South traffic flow?

• A. Lateral movement within a cloud or data center
• B. An internal three-tier application
• C. Client-server interactions that cross the edge perimeter
• D. Traffic between an internal server and internal user

Answer: C

NEW QUESTION 16
In the attached network diagram, which device is the switch?

• A. A
• B. B
• C. C
• D. D

Answer: D

NEW QUESTION 17
In addition to integrating the network and endpoint components, what other component does Cortex integrate to speed up IoC investigations?

• A. Computer
• B. Switch
• C. Infrastructure
• D. Cloud

Answer: C

NEW QUESTION 18
Which key component is used to configure a static route?

• A. router ID
• B. enable setting
• C. routing protocol
• D. next hop IP address

Answer: D

NEW QUESTION 19
What does SIEM stand for?

• A. Security Infosec and Event Management
• B. Security Information and Event Management
• C. Standard Installation and Event Media
• D. Secure Infrastructure and Event Monitoring

Answer: B

NEW QUESTION 20
Which product from Palo Alto Networks enables organizations to prevent successful cyberattacks as well as simplify and strengthen security processes?

• A. Expedition
• B. AutoFocus
• C. MineMeld
• D. Cortex XDR

Answer: D

NEW QUESTION 21
......