Question 1

Which security function enables a firewall to validate the operating system version of a device before granting it network access?

Options :

A : Sandboxing

B : Stateless packet inspection

C : Host intrusion prevention system (HIPS)

D : Identity Threat Detection and Response (ITDR)

Answer: C

Question 2

A global enterprise is deploying Palo Alto Networks' Threat Prevention subscription to protect its network from advanced threats. During configuration, which of the following strategies is the most effective way to mitigate risks posed by known and unknown threats?

Options :

A : Enable Intrusion Prevention System (IPS) signatures only for critical servers.

B : Disable signature updates to avoid disrupting ongoing network operations.

C : Rely solely on URL filtering to block access to malicious websites.

D : Apply Threat Prevention profiles to all security policies, including intra-zone traffic.

Answer: D

Question 3

Which of the following characteristics is most commonly associated with spamming botnets?

Options :

A : They primarily perform brute force attacks to compromise user credentials.

B : They send large volumes of unsolicited emails or messages using compromised devices.

C : They mine cryptocurrency on compromised devices without the owner-s consent.

D : They generate fraudulent clicks on advertisements to increase revenue for attackers.

Answer: B

Question 4

Your organization has implemented a Managed Detection and Response (MDR) service alongside an endpoint security platform. During a security audit, the team is reviewing the overlap between the MDR service and Incident Response (IR) tools to understand their roles in the cybersecurity framework. Which of the following statements best highlights the difference between MDR services and IR tools?

Options :

A : MDR services provide real-time threat hunting and response, while IR tools focus on post-incident forensic analysis and remediation.

B : MDR services only monitor alerts, while IR tools perform active threat containment.

C : IR tools are cloud-based, while MDR services are on-premises.

D : MDR services are designed for internal use by cybersecurity teams, while IR tools are outsourced to external consultants.

Answer: A

Question 5

Which next-generation firewall (NGFW) deployment option provides full application visibility into Kubernetes environments?

Options :

A : Virtual

B : Container

C : Physical

D : SASE

Answer: B

Confidently Practice Online with Free Cybersecurity-Practitioner Exam Cram

Buying Options: