Free Cybersecurity-Practitioner Exam Braindumps
Palo Alto Networks Cybersecurity Practitioner Questions 66–70 (page: 15)

Updated On: 10-Feb-2026

What are two limitations of signature-based anti-malware software? (Choose two.)

  1. It is unable to detect polymorphic malware.
  2. It requires samples lo be buffered
  3. It uses a static file for comparing potential threats.
  4. It only uses packet header information.

Answer(s): A,C

Explanation:

Signature-based systems struggle with polymorphic or obfuscated malware, which changes its code to avoid detection. Signature-based detection relies on static databases of known threat signatures, limiting its ability to identify new or unknown threats.



What would allow a security team to inspect TLS encapsulated traffic?

  1. DHCP markings
  2. Decryption
  3. Port translation
  4. Traffic shaping

Answer(s): B

Explanation:

Decryption is required to inspect TLS-encrypted traffic, allowing security tools (such as firewalls or intrusion prevention systems) to analyze the contents of the traffic for threats that would otherwise remain hidden within encrypted sessions.



What is an advantage of virtual firewalls over physical firewalls for internal segmentation when placed in a data center?

  1. They are dynamically scalable.
  2. They possess unlimited throughput capability.
  3. They are able to prevent evasive threats.
  4. They have failover capability.

Answer(s): A

Explanation:

Virtual firewalls offer the advantage of dynamic scalability, making them ideal for internal segmentation in data centers. They can be quickly deployed, resized, and adjusted to meet the needs of changing workloads and environments, unlike physical firewalls which require fixed hardware resources.



What is a reason IoT devices are more susceptible to command-and-control (C2) attacks?

  1. Decreased connection quality within a local area network
  2. Increased sharing of data through the internet
  3. Higher attack surface due to mobility
  4. Limited batten/ life preventing always-on security

Answer(s): B

Explanation:

IoT devices often have constant internet connectivity and increased data sharing, making them more vulnerable to command-and-control (C2) attacks. Their limited security features and exposure to external networks provide attackers more opportunities to compromise and control them remotely.



Which tool's analysis data gives security operations teams insight into their environment's risks from exposed services?

  1. IIDP
  2. IAM
  3. SIM
  4. Xpanse

Answer(s): D

Explanation:

Xpanse is a tool from Palo Alto Networks that provides attack surface management by analyzing exposed services and internet-facing assets, giving security operations teams visibility into environmental risks and helping prioritize remediation of vulnerabilities.



Viewing page 15 of 46
Viewing questions 71 - 75 out of 225 questions


Post your Comments and Discuss Palo Alto Networks Cybersecurity-Practitioner exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!