Networkers home Palo alto v10( PCNSE)

1. Used to restrict the internet activity of users on a network and match a web address (uniform resource locator, or URL) against a database of websites

2. Attempt to classify websites based on broad categories that are either allowed or blocked for various groups of users on the network.

3. An example of this is a marketing and human resources departments may have access to social media sites such as Facebook and LinkedIn for legitimate online marketing and recruiting activities, while other users are blocked.

4. Provide real-time monitoring of network traffic and perform deep-packet inspection and analysis of network activity and data.

5. The primary difference between IDS and IPS is:

6. Firewalls, intrusion detection systems, Intrusion Prevention Systems (IDS/IPS) and web content filters are all considered:

7. Packet filtering and Stateful Packet Inspection (SPI) are two types of:

8. Performs all of the same functions as an IDS but also automatically blocks or drops suspicious, pattern-matching activity on the network in real-time.

9. A unique reference (or address) to an internet resource, such as a webpage.

10. Items typically are analyzed by a next-generation firewall. Check all that apply.

11. Can successfully improve a company's security posture by simplifying their security product portfolio.

12. Which term refers to stripping header information as a PDU is passed from one layer to a higher layer?

13. The OSI Application Layer manages encryption and formatting.

14. Which OSI layer handles flow control, data segmentation, and reliability?

15. Which of the following problems can occur at the Physical layer?

16. Which OSI layer is responsible for setting up, maintaining, and ending ongoing information exchanges across a network?

17. Which OSI layer determines the route a packet takes from sender to receiver?

18. At which Data Link sublayer does the physical address reside?

19. At which OSI layer does the PDU contain sequence and acknowledgement numbers?

20.HTTP interacts with which OSI layer?

21. Which layer of the OSI model does Project 802 divide into two sublayers?

22. True or False. A vulnerability is a small piece of software code, part of a malformed data file, or a sequence (string) of commands created by an attacker to cause unintended or unanticipated behavior in a system or software.

23. Some important characteristics and capabilities of advanced malware include:

24. True or False. Wired Equivalent Privacy (WEP) is the most effective protocol for securing wireless networks.

25. What is an easy way to make your WiFi security stronger and make it more difficult for hackers to discover your wireless network?

26. What type of attack is intended to rapidly cause damage to the victim's network and system infrastructure, as well as their business and reputation?

27. Malicious software or code that typically damages, takes control of, or collects information from an infected endpoint is known as:

28. What type of malware typically targets a computer network by replicating itself in order to spread rapidly?

29. What type of malware allows an attacker to bypass authentication to gain access to a compromised system?

30. What type of malware is triggered by a specific condition, such as a specific date or a particular user account being disabled?

31. True or False. Most Botnets are designed to withstand the loss of a command and control (CnC) server, meaning that the entire Botnet infrastructure must be disabled almost simultaneously.

32. When you set up a wireless home network, you give it a name to distinguish it from other networks in your neighborhood. The technical term for this network name is:

33. This protocol was the wireless industry’s first attempt at security. It was intended to provide data confidentiality equivalent to the security of a wired network but had many, well-known weaknesses and wasn’t effective for establishing a secure wireless network. .

34. By far the most common, particularly in homes, small businesses, and guest Wi-Fi networks.

35. Which IP address type is commonly self-assigned by a DHCP client when no DHCP server is available?

36. Windows Directory Services allows you to:

37. Why would you use a Time Domain Reflectometer?

38. CRC, Cyclic Redundancy Check, is used to verify:

39. Select the three pillars of security orchestration.

40. WIldFire operates on which concept?

41. T/F? WIldFire prevents known and unknown malware threats.

42. T/F? WildFIre performs deep packet inspection of malicious outbound communications to disrupt C&C activity.