PCCP 試験問題を無料オンラインアクセス

What differentiates SOAR from SIEM?

• A.SOAR platforms filter alerts with their broader coverage of security incidents.
• B.SOAR platforms collect data and send alerts.
• C.SOAR platforms focus on analyzing network traffic.
• D.SOAR platforms integrate automated response into the investigation process.

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

• A.Stateless firewall
• B.Personal endpoint firewall
• C.Next-generation firewall
• D.Port-based firewall

Which technique uses file sharing or an instant messenger client such as Meebo running over Hypertext Transfer Protocol (HTTP)?

• A.Port hopping
• B.Use of non-standard ports
• C.Hiding within SSL encryption
• D.Tunneling within commonly used services

Under which category does an application that is approved by the IT department, such as Office 365, fall?

• A.sanctioned
• B.unsanctioned
• C.tolerated
• D.prohibited

From which resource does Palo Alto Networks AutoFocus correlate and gain URL filtering intelligence?

• A.BrightCloud
• B.MineMeld
• C.PAN-DB
• D.Unit 52