Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which type of system does not perform any preventive action to stop an attack?

1. Data loss prevention

2. Intrusion Prevention

3. Unified Threat Management

4. Intrusion detection

The correct answer is: Intrusion detection

The selected answer refers to intrusion detection systems (IDS), which are specifically designed to monitor network traffic and system activities for signs of malicious behavior or policy violations. An IDS identifies potential security threats or attacks and alerts administrators about them, but it does not take any direct action to prevent those attacks from occurring. In contrast, other systems designed for security, such as data loss prevention (DLP), intrusion prevention systems (IPS), and unified threat management (UTM), are proactive in nature. A DLP system actively scans and prevents sensitive data from being transmitted outside of authorized environments. An IPS not only detects intrusions but also takes immediate actions, such as blocking or mitigating attacks in real-time. UTM integrates several security functions, including firewall protection, IPS, and anti-virus, to provide comprehensive security measures. Thus, while an intrusion detection system identifies and alerts on potential threats, it does not mitigate them, making it the correct choice for this question.