What are two functions of User and Entity Behavior Analytics (UEBA) data in Prisma Cloud CSPM? (Choose two.)
Answer(s): A,D
Assessing severity levels UEBA data helps prioritize incidents by evaluating the risk and severity based on user and entity behavior.Detecting and correlating anomalies UEBA continuously analyzes activity to identify abnormal behavior and correlate anomalies that may indicate insider threats or compromised accounts.
Which two statements apply to the SSL/TLS protocol? (Choose two.)
Answer(s): B,C
SSL/TLS encrypts and authenticates web-based communication to ensure secure data transmission over networks. It ensures privacy by encrypting the data exchanged between a client and a server, protecting it from interception or tampering. It doesn't handle user input like passwords directly.
Which two workflows are improved by integrating SIEMs with other security solutions? (Choose two.)
Answer(s): B,D
Log normalization SIEMs standardize log formats from various sources, making it easier to analyze and correlate security events.Incident response Integration enables faster detection, investigation, and automated or guided response to security incidents by using correlated data from multiple tools.Hardware procurement and security team training are not directly influenced by SIEM integration.
Which endpoint protection security option can prevent malware from executing software?
Answer(s): A
An application allow list prevents malware from executing by only permitting approved applications to run on an endpoint. Any unauthorized or unknown software, including malicious programs, is automatically blocked from executing.
Which activity is a technique in the MITRE ATT&CK framework?
Answer(s): D
Account discovery is a technique in the MITRE ATT&CK framework under the Discovery tactic. It involves adversaries attempting to identify user accounts on a system or network.Credential access, lateral movement, and resource development are tactics -- high-level objectives an attacker is trying to achieve.
Post your Comments and Discuss Palo Alto Networks Cybersecurity-Practitioner exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Cybersecurity-Practitioner content, but please register or login to continue.