PCCET practice question 9 of 25
Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?
Full set: 158 questionsA next-generation firewall (NGFW) is a security component that can detect command-and-control (C2) traffic sent from multiple endpoints within a corporate data center. A NGFW is a network device that combines traditional firewall capabilities with advanced features such as application awareness, intrusion prevention, threat intelligence, and cloud-based analysis. A NGFW can identify and block C2 traffic by inspecting the application layer protocols, signatures, and behaviors of the network traffic, as well as correlating the traffic with external sources of threat intelligence. A NGFW can also leverage inline cloud analysis to detect and prevent zero-day C2 threats in real-time. A NGFW can provide granular visibility and control over the network traffic, as well as generate alerts and reports on the C2 activity. Reference: Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET) Command and Control, Tactic TA0011 - Enterprise | MITRE ATT&CK® Advanced Threat Prevention: Inline Cloud Analysis - Palo Alto Networks
Keep practicing
Take the free PCCET practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCCET practice questions
- Question 1What are two key characteristics of a Type 1 hypervisor? (Choose two.)
- Question 2What is a key benefit of Cortex XDR?
- Question 3Which of the following is a service that allows you to control permissions assigned to us…
- Question 4Which protocol is used by both internet service providers (ISPs) and network service prov…
- Question 5Which two statements describe the Jasager attack? (Choose two.)
- Question 6On which security principle does virtualization have positive effects?
