Palo Alto Networks Cybersecurity Practitioner Cybersecurity-Practitioner Exam Questions

Page: 1 / 14
Total 225 questions
Question 1

During the OSI layer 3 step of the encapsulation process, what is the Protocol Data Unit (PDU) called when the IP stack adds source (sender) and destination (receiver) IP addresses?



Answer : C

The IP stack adds source (sender) and destination (receiver) IP addresses to the TCP segment (which now is called an IP packet) and notifies the server operating system that it has an outgoing message ready to be sent across the network.


Question 2

In an IDS/IPS, which type of alarm occurs when legitimate traffic is improperly identified as malicious traffic?



Answer : A

In anti-malware, a false positive incorrectly identifies a legitimate file or application as malware. A false negative incorrectly identifies malware as a legitimate file or application. In intrusion detection, a false positive incorrectly identifies legitimate traffic as a threat, and a false negative incorrectly identifies a threat as legitimate traffic.


Question 3

In which step of the cyber-attack lifecycle do hackers embed intruder code within seemingly innocuous files?



Answer : A

'Weaponization: Next, attackers determine which methods to use to compromise a target endpoint. They may choose to embed intruder code within seemingly innocuous files such as a PDF or Microsoft Word document or email message.'


Question 4

What is the primary security focus after consolidating data center hypervisor hosts within trust levels?



Answer : D

page 211 'Consolidating servers within trust levels: Organizations often consolidate servers within the same trust level into a single virtual computing environment: ... ... ... This virtual systems capability enables a single physical device to be used to simultaneously meet the unique requirements of multiple VMs or groups of VMs. Control and protection of inter-host traffic with physical network security appliances that are properly positioned and configured is the primary security focus.'


Question 5

Layer 4 of the TCP/IP Model corresponds to which three Layer(s) of the OSI Model? (Choose three.)



Answer : C, D, E

Layer 4 of the TCP/IP model is the transport layer, which is responsible for providing reliable and efficient data transmission between hosts. The transport layer can use different protocols, such as TCP or UDP, depending on the requirements of the application. The transport layer also performs functions such as segmentation, acknowledgement, flow control, and error recovery. 1

The transport layer of the TCP/IP model corresponds to three layers of the OSI model: the transport layer, the session layer, and the presentation layer. The session layer of the OSI model manages the establishment, maintenance, and termination of sessions between applications. The session layer also provides services such as synchronization, dialogue control, and security. The presentation layer of the OSI model handles the representation, encoding, and formatting of data for the application layer. The presentation layer also performs functions such as compression, encryption, and translation. 23


*1: TCP/IP Model - GeeksforGeeks

*2: Transport Layer | Layer 4 | The OSI-Model

*3: Transport Layer Explanation -- Layer 4 of the OSI Model

Question 6

Which type of firewall should be implemented when a company headquarters is required to have redundant power and high processing power?



Answer : B

A physical firewall is ideal for environments like a company headquarters that require redundant power, high throughput, and dedicated hardware for maximum reliability and performance. It supports more robust failover and scalability compared to virtual or containerized options.


Question 7

A native hypervisor runs:



Answer : D

Type 1 (native or bare metal). Runs directly on the host computer's hardware

Type 2 (hosted). Runs within an operating system environment


Page:    1 / 14   
Total 225 questions