Palo Alto Networks Exam PCCSE Topic 1 Question 71 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 71
Topic #: 1

[All PCCSE Questions]

Which policy type provides information about connections from suspicious IPs in a customer database?

AAnomaly

BThreat detection

CNetwork

DAutoFocus

Show Suggested Answer

Suggested Answer: C

To provide information about connections from suspicious IPs in a customer database, the Network policy type should be used. Network policies within Prisma Cloud are designed to monitor and control network traffic, including detecting connections from known malicious or suspicious IP addresses. This capability is crucial for identifying potential threats and unauthorized access attempts, making Option C the correct answer.

by Ronny at Mar 04, 2024, 02:01 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Simona

7 months ago

That makes sense, AutoFocus does provide actionable intelligence on potential threats.

upvoted 0 times

...

Therese

7 months ago

I think it's D) AutoFocus because it provides detailed information on threats and their sources.

upvoted 0 times

...

Simona

7 months ago

But Threat detection focuses on identifying potential threats, not just suspicious IPs.

upvoted 0 times

...

Emogene

7 months ago

I disagree, I believe it's A) Anomaly.

upvoted 0 times

...

Simona

7 months ago

I think the answer is B) Threat detection.

upvoted 0 times

...

Arthur

8 months ago

Hmm, I don't know. 'Network' policy could also be a possibility, since that's generally about managing and monitoring network traffic. But I think Threat detection is the best bet.

upvoted 0 times

Salome

7 months ago

Let's go with Threat detection as our final answer.

upvoted 0 times

...

Avery

7 months ago

True, both would be good options to consider for dealing with suspicious IPs in a customer database.

upvoted 0 times

...

Felicia

8 months ago

So, maybe it's between Threat detection and AutoFocus then.

upvoted 0 times

...

Rosendo

8 months ago

I see your point. But AutoFocus is more about analyzing and identifying malicious activity.

upvoted 0 times

...

Gail

8 months ago

Anomaly could also be a possibility, since it focuses on detecting unusual behavior.

upvoted 0 times

...

Brice

8 months ago

Yeah, that makes sense. It's specifically designed to identify and respond to potential threats.

upvoted 0 times

...

Raina

8 months ago

I think Threat detection is the best bet.

upvoted 0 times

...

Clorinda

8 months ago

Yeah, I agree with you on that. 'Threat detection' sounds like the most likely answer here. I mean, 'Anomaly' could work, but that's more for general unusual activity, not specifically suspicious IPs.

upvoted 0 times

...

Val

8 months ago

Well, I'm leaning towards B, 'Threat detection'. That policy type is usually used to identify suspicious activity, like connections from IPs that could be malicious.

upvoted 0 times

...

Ashley

8 months ago

Hmm, this question seems a bit tricky. I'm not sure if the answer is A, B, or C. What do you guys think?

upvoted 0 times

...