Home / Palo Alto Networks / PCCET

Question list

List of questions

Question 1

(0)

What should a security operations engineer do if they are presented with an encoded string during an incident investigation?

Question 2

(0)

What are three benefits of the cloud native security platform? (Choose three.)

Question 3

(0)

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

Question 4

(0)

Which native Windows application can be used to inspect actions taken at a specific time?

Question 5

(0)

Which of the following is a Routed Protocol?

Question 6

(0)

What are the two most prominent characteristics of the malware type rootkit? (Choose two.)

Question 7

(0)

What is a key method used to secure sensitive data in Software-as-a-Service (SaaS) applications?

Question 8

(0)

In the network diagram below, which device is the router?

Question 9

(0)

Which SOAR feature coordinates across technologies, security teams, and external users for centralized data visibility and action?

Question 10

(0)

Which analysis detonates previously unknown submissions in a custom-built, evasion-resistant virtual environment to determine real-world effects and behavior?

Question 82 - PCCET discussion

A doctor receives an email about her upcoming holiday in France. When she clicks the URL website link in the email, the connection is blocked by her office firewall because it's a known malware website. Which type of attack includes a link to a malware website in an email?

whaling

phishing

pharming

spam

Suggested answer: B

Explanation:

Phishing is a type of attack that involves sending fraudulent emails that appear to be from legitimate sources, such as banks, companies, or individuals, in order to trick recipients into clicking on malicious links, opening malicious attachments, or providing sensitive information12.The link to a malware website in the email is an example of a malicious link, which may lead to the installation of malware, ransomware, spyware, or other malicious software on the user's device, or the redirection to a fake website that mimics a legitimate one, where the user may be asked to enter their credentials, personal information, or financial details34.Phishing emails often use social engineering techniques, such as creating a sense of urgency, curiosity, or fear, to persuade the user to click on the link or attachment, or to reply to the email5.Phishing emails may also spoof the sender's address, domain, or logo, to make them look more authentic and trustworthy6.

Whaling, pharming, and spam are not the correct answers for this question.Whaling is a specific type of phishing that targets high-profile individuals, such as executives, celebrities, or politicians, with the aim of stealing their confidential information or influencing their decisions7. Pharming is a type of attack that involves redirecting the user's web browser to a fake website, even if they enter the correct URL, by modifying the DNS server or the user's hosts file. Spam is the unsolicited or unwanted electronic messages, such as emails, texts, or instant messages, that are sent in bulk to a large number of recipients, usually for advertising, marketing, or scamming purposes.Reference:

What is phishing? | Malwarebytes

Phishing - Wikipedia

Don't Panic! Here's What To Do If You Clicked On A Phishing Link

How can Malware spread through Email and How to Protect

What is phishing? How this cyber attack works and how to prevent it ...

Identifying Illegitimate Email Links | Division of Information Technology

What is whaling? | NortonLifeLock

[What is pharming? | NortonLifeLock]

[What is spam? | NortonLifeLock]

Show Answer

asked 23/09/2024

Gerrit Struik

54 questions

Your answer: A B C D

0 comments

Sorted by