Palo Alto Networks Exam PCCSE Topic 3 Question 100 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 100
Topic #: 3

A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which three options could have generated this audit? (Choose three.)

AThe value of the mined currency exceeds $100.

BHigh CPU usage over time for the container is detected.

CCommon cryptominer process name was found.

DThe mined currency is associated with a user token.

ECommon cryptominer port usage was found.

Show Suggested Answer

Suggested Answer: B, C, E

In the case of identifying a cryptominer attack through container audits, the options that could have generated this audit include B. High CPU usage over time for the container is detected, which is a common indicator of cryptomining activity as it consumes significant computational resources, C. Common cryptominer process name was found, which directly indicates the presence of cryptomining based on known malicious processes, and E. Common cryptominer port usage was found, suggesting cryptomining activity based on network behavior typical of such attacks.

by Leila at May 05, 2025, 02:42 AM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ellen

10 days ago

I believe option D could also be a potential indicator. If the mined currency is associated with a user token, it could point to a cryptominer attack.

upvoted 0 times

...

Thomasena

10 days ago

The customer must be really crypto-curious about this one. I'd say B, C, and E are the way to go.

upvoted 0 times

...

Cory

13 days ago

Hmm, I'd go with B, C, and E as well. Gotta keep an eye out for those sneaky cryptominers trying to dig into the system.

upvoted 0 times

Vincenza

3 days ago

B) High CPU usage over time for the container is detected.

upvoted 0 times

...

Brock

19 days ago

I agree with Junita. High CPU usage, common cryptominer process name, and port usage are all indicators of a cryptominer attack.

upvoted 0 times

...

Izetta

28 days ago

Wow, a cryptominer attack? I bet the customer is really mining for answers here! B, C, and E sound like the winning ticket.

upvoted 0 times

Sabra

1 days ago

I agree, B, C, and E are the likely culprits.

upvoted 0 times

...

Junita

1 months ago

I think options B, C, and E could have generated this audit.

upvoted 0 times

...

Ettie

2 months ago

B, C, and E are the correct options. The high CPU usage, common cryptominer process name, and port usage are all clear indicators of a cryptominer attack.

upvoted 0 times

Shaun

18 days ago

E) Common cryptominer port usage was found.

upvoted 0 times

...

Whitley

22 days ago

C) Common cryptominer process name was found.

upvoted 0 times

...

Noemi

1 months ago

B) High CPU usage over time for the container is detected.

upvoted 0 times

...