"In serverless apps, the developer uploads only the app package itself, without a full container image

or any OS components. The platform dynamically packages it into an image, runs the image in a

container, and (if needed) instantiates the underlying host OS and VM and the hardware required to

run them."

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Palo_Alto_Networks_PCCET/page_32_img_1.jpg

● Reduce the attack surface: Best-of-breed technologies that are natively integrated provide a

prevention architecture that inherently reduces the attack surface. This type of architecture allows

organizations to exert positive control based on applications, users, and content, with support for

open communication, orchestration, and visibility.

● Prevent all known threats, fast: A coordinated security platform accounts for the full scope of an

attack across the various security controls that compose the security posture, thus enabling

organizations to quickly identify and block known threats.

● Detect and prevent new, unknown threats with automation: Security that simply detects

threats and requires a manual response is too little, too late. Automated creation and

delivery of near-real-time protections against new threats to the various security solutions in the

organization’s environments enable dynamic policy updates. These updates are

designed to allow enterprises to scale defenses with technology, rather than people.

"Remember that a trust zone is not intended to be a “pocket of trust” where systems (and therefore

threats) within the zone can communicate freely and directly with each other. For a full Zero Trust

implementation, the network would be configured to ensure that all communications traffic,

including traffic between devices in the same zone, is intermediated by the corresponding Zero Trust

Segmentation Platform."

A switch is a network device that connects multiple devices on a local area network (LAN) and

forwards data packets between them. A switch can be identified by its icon, which is a rectangle with

four curved lines on each side. In the attached network diagram, device D is the switch, as it matches

the icon and connects three computers to device A, which is another network device. Reference:

[What is a Network Switch and How Does it Work?]

[Network Diagram Symbols and Icons | Lucidchart]

Phishing is a type of email attack where the attacker sends a lot of malicious emails in an untargeted

way, pretending to be a trusted source, such as a bank or an online retailer, to trick users into

revealing sensitive information, such as passwords or credit card numbers. Attackers use the

information to steal money or to launch other attacks. A fake email from a bank asking you to click a

link and verify your account details is an example of phishing1 Reference:

1: Palo Alto Networks Certified Cybersecurity Entry-level Technician - Palo Alto Networks

2: 10 Palo Alto Networks PCCET Exam Practice Questions - CBT Nuggets

3: Types of Email Attacks - Examples and Consequences - Tessian

4: What Is a Phishing Attack? Definition and Types - Cisco

When you enable URL Filtering, all web traffic is compared against the URL Filtering database, PAN-

DB, which contains millions of URLs that have been grouped into about 65 categories.

Examples of serverless environments include Amazon Lambda and Azure Functions. Many PaaS

offerings, such as Pivotal Cloud Foundry, also are effectively serverless even if they have not

historically been marketed as such. Although serverless may appear to lack the container-specific,

cloud native attribute, containers are extensively used in the underlying implementations, even if

those implementations are not exposed to end users directly.

The IP stack adds source (sender) and destination (receiver) IP addresses to the TCP segment (which

now is called an IP packet) and notifies the server operating system that it has an outgoing message

ready to be sent across the network.

Cortex XSOAR enhances Security Operations Center (SOC) efficiency with the world’s most

comprehensive operating platform for enterprise security. Cortex XSOAR unifies case management,

automation, real-time collaboration, and native threat intel management in the industry’s first

extended security orchestration, automation, and response (SOAR) offering.

Dynamic analysis is a method of malware analysis that executes the malware in a controlled

environment and observes its behavior and effects. Dynamic analysis can reveal the malware’s

network activity, file system changes, registry modifications, and other indicators of compromise.

Dynamic analysis is performed by Palo Alto Networks WildFire, a cloud-based service that analyzes

unknown files and links from various sources, such as email attachments, web downloads, and

firewall traffic. WildFire uses a custom-built, evasion-resistant virtual environment to detonate the

submissions and generate detailed reports and verdicts. WildFire can also share the threat

intelligence with other Palo Alto Networks products and partners to prevent future

attacks. Reference: WildFire Overview, WildFire Features, WildFire Dynamic Analysis