Palo Alto Networks Exam PCCSE Topic 1 Question 71 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 71
Topic #: 1

[All PCCSE Questions]

Which policy type provides information about connections from suspicious IPs in a customer database?

AAnomaly

BThreat detection

CNetwork

DAutoFocus

Show Suggested Answer

Suggested Answer: C

To provide information about connections from suspicious IPs in a customer database, the Network policy type should be used. Network policies within Prisma Cloud are designed to monitor and control network traffic, including detecting connections from known malicious or suspicious IP addresses. This capability is crucial for identifying potential threats and unauthorized access attempts, making Option C the correct answer.

by Ronny at Mar 04, 2024, 02:01 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Simona

12 months ago

That makes sense, AutoFocus does provide actionable intelligence on potential threats.

upvoted 0 times

...

Therese

12 months ago

I think it's D) AutoFocus because it provides detailed information on threats and their sources.

upvoted 0 times

...

Simona

12 months ago

But Threat detection focuses on identifying potential threats, not just suspicious IPs.

upvoted 0 times

...

Emogene

12 months ago

I disagree, I believe it's A) Anomaly.

upvoted 0 times

...

Simona

1 years ago

I think the answer is B) Threat detection.

upvoted 0 times

...

Arthur

1 years ago

Hmm, I don't know. 'Network' policy could also be a possibility, since that's generally about managing and monitoring network traffic. But I think Threat detection is the best bet.

upvoted 0 times

Salome

1 years ago

Let's go with Threat detection as our final answer.

upvoted 0 times

...

Avery

1 years ago

True, both would be good options to consider for dealing with suspicious IPs in a customer database.

upvoted 0 times

...

Felicia

1 years ago

So, maybe it's between Threat detection and AutoFocus then.

upvoted 0 times

...

Rosendo

1 years ago

I see your point. But AutoFocus is more about analyzing and identifying malicious activity.

upvoted 0 times

...

Gail

1 years ago

Anomaly could also be a possibility, since it focuses on detecting unusual behavior.

upvoted 0 times

...

Brice

1 years ago

Yeah, that makes sense. It's specifically designed to identify and respond to potential threats.

upvoted 0 times

...

Raina

1 years ago

I think Threat detection is the best bet.

upvoted 0 times

...

Clorinda

1 years ago

Yeah, I agree with you on that. 'Threat detection' sounds like the most likely answer here. I mean, 'Anomaly' could work, but that's more for general unusual activity, not specifically suspicious IPs.

upvoted 0 times

...

Val

1 years ago

Well, I'm leaning towards B, 'Threat detection'. That policy type is usually used to identify suspicious activity, like connections from IPs that could be malicious.

upvoted 0 times

...

Ashley

1 years ago

Hmm, this question seems a bit tricky. I'm not sure if the answer is A, B, or C. What do you guys think?

upvoted 0 times

...