Palo Alto Networks Exam PCCSE Topic 3 Question 96 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 96
Topic #: 3

A customer wants to be notified about port scanning network activities in their environment. Which policy type detects this behavior?

ANetwork

BPort Scan

CAnomaly

DConfig

Show Suggested Answer

Suggested Answer: C

The Cloud Security Assessment report is a PDF report that summarizes the risks from open alerts in the monitored cloud accounts for a specific cloud type. The report includes an executive summary and a list of policy violations, including a page with details for each policy that includes the description and the compliance standards that are associated with it, the number of resources that passed and failed the check within the specified time period. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/generate-reports-on-prisma-cloud-alerts

The report that includes an executive summary along with a list of policy violations and detailed pages for each policy is the 'Cloud Security Assessment' report. This type of report is designed to provide organizations with a comprehensive overview of their cloud security posture, highlighting both compliance with security policies and areas needing attention.

by Mammie at Feb 07, 2025, 03:03 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joseph

20 days ago

I'm thinking D) Config, because the customer probably wants to configure their network to be invisible to all port scans. That's the ultimate security measure, right?

upvoted 0 times

...

Tegan

21 days ago

Hmm, this one's tricky. I'm leaning towards B) Port Scan, but I'm not 100% sure. Maybe I should ask the proctor if they're feeling generous today.

upvoted 0 times

...

Stephanie

23 days ago

Hold on, let me think this through. I'm going to go with B) Port Scan. It just makes the most sense for this use case, doesn't it?

upvoted 0 times

...

Latonia

1 months ago

I'm going with C) Anomaly. Port scanning could be considered an anomalous behavior, so that policy type seems like the best fit for this scenario.

upvoted 0 times

Dominic

5 days ago

Let's go with C) Anomaly then, it makes the most sense.

upvoted 0 times

...

Gracie

9 days ago

Anomaly policies are designed to detect unusual activities like port scanning.

upvoted 0 times

...

Abel

10 days ago

I agree, port scanning is definitely an anomalous behavior.

upvoted 0 times

...

Mari

1 months ago

I think C) Anomaly is the best choice here.

upvoted 0 times

...

Geraldine

2 months ago

But port scanning is a specific behavior that needs to be detected, so I still think it's B) Port Scan.

upvoted 0 times

...

Jennie

2 months ago

I think the answer is B) Port Scan. That's the policy type that's specifically designed to detect port scanning activities, which is what the customer wants to be notified about.

upvoted 0 times