Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

An attacker needs to succeed in executing only one step of the cyberattack lifecycle to infiltrate a network, whereas a defender must "be right every time". What is the correct response?

1. True

2. False

3. Only in some cases

4. Not applicable

The correct answer is: False

The assertion in the question highlights a critical aspect of cybersecurity: the inherent asymmetry between attackers and defenders. While an attacker can succeed by completing just one step of the cyberattack lifecycle, which could lead to unauthorized access to a network, the defender has the continuous responsibility of ensuring that all potential vulnerabilities are addressed and protected in order to thwart any infiltration attempts. In this context, the phrase "be right every time" underscores the defender's ongoing challenge of managing security risks across a myriad of scenarios, each requiring accurate monitoring, swift detection, and effective response. If a defender misses even a single vulnerability or threat, it can lead to a successful breach by an attacker. The rationale for the correct response being false is rooted in the understanding that while attackers indeed need just one success in their various tactics, defenders must consistently maintain their security measures to safeguard against a multitude of threats and vulnerabilities. Cyber defense is thus characterized by a more comprehensive duty to preclude any chance of failure, translating to a higher demand for diligence and thoroughness in protective measures.