A company has a mix of on-premises servers and cloud-based virtual machines. They need to deploy a detection system that can monitor both environments consistently. Which approach is most appropriate?

Deploy a HIDS on each server and VM

Deploy a NIDS on the on-premises network only

Deploy a firewall with logging in both environments

Deploy a NIDS in the cloud only

In a layered cybersecurity defense strategy, what is the role of a Host-Based Intrusion Detection System (HIDS)?

To replace the need for antivirus software

To encrypt data stored on the host

To detect suspicious activity on a specific endpoint or server

To monitor the network perimeter for external attacks

Which of the following is a common threat detection system that monitors network traffic for suspicious patterns?

Network-Based Intrusion Detection System (NIDS)

A company is deploying detection systems and has a requirement to detect both external attacks and insider threats. They have a limited budget and can only deploy one type of system. Which system provides the best balance of coverage for both threats?

A firewall with logging enabled

A NIDS on the internal network segment

A NIDS at the network perimeter

A security analyst suspects that an attacker has compromised a single workstation and is modifying local files and processes to maintain persistence. Which type of detection system would be most effective at detecting this activity?

A firewall with stateful inspection enabled

A host-based IDS (HIDS) installed on the workstation

A network-based IDS (NIDS) placed on the workstation's network segment

A network-based IDS (NIDS) placed at the network perimeter

Palo Alto NetworksCertified Cybersecurity Apprentice

Domain 1Objective 4

1.4 Identify and Describe Common Threat Detection Systems (e.g., Intrusion Detection System [IDS], Host-Based Intrusion Detection System [HIDS], Network-Based Detection System [NIDS]) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Part of the Cybersecurity domain, which accounts for 16% of the CYBERSECURITY-APPRENTICE exam.

18questions here

4free pages

3concepts

16%of the exam

Questions 6–10

6expert · hard
A company has a mix of on-premises servers and cloud-based virtual machines. They need to deploy a detection system that can monitor both environments consistently. Which approach is most appropriate?
Select an answer first
7foundation · easy
In a layered cybersecurity defense strategy, what is the role of a Host-Based Intrusion Detection System (HIDS)?
Select an answer first
8foundation · easy
Which of the following is a common threat detection system that monitors network traffic for suspicious patterns?
Select an answer first
9expert · hard
A company is deploying detection systems and has a requirement to detect both external attacks and insider threats. They have a limited budget and can only deploy one type of system. Which system provides the best balance of coverage for both threats?
Select an answer first
10application · medium
A security analyst suspects that an attacker has compromised a single workstation and is modifying local files and processes to maintain persistence. Which type of detection system would be most effective at detecting this activity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-APPRENTICE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-APPRENTICE” is a trademark of its owner, used for identification only.