PPAN01 by Proofpoint Actual Free Exam Q&As

Question 1

Under what circumstances will TAP generate an email notification alert?

A. A message has been delivered to numerous recipients. B. A click has been blocked to a malicious site. C. A malicious attachment was blocked from delivery. D. A malicious impostor message has been delivered.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Based on the metrics for the highlighted week, how many malicious messages were blocked by TAP at the email gateway?

A. 132,537 B. 5,164 C. 3306 D. 69

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

What is the purpose of Smart Search?

A. Trace and analyze information about files downloaded from a user's computer. B. Trace and analyze information about messages processed by the Proofpoint Protection Server. C. Trace and analyze information about user clicks on external websites. D. Trace and analyze information about firewall breaches.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Which two items should be included in an incident report to be discussed during a post-incident debrief?
(Select two.)

A. Software inventory B. Product manuals C. Speculation about adversary attribution D. Incident timeline E. Devices and systems involved

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

What is the first action a security analyst should take when beginning to review and prioritize alerts from Targeted Attack Protection (TAP)?

A. Use filtering options on the TAP Threats page to organize and prioritize threat alerts. B. Open and examine the contents of an email using the associated .eml file. C. Assess claims of false positives by analyzing forensic details and threat indicators. D. Investigate false negatives by identifying root causes in source policy configurations.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

An analyst wants to use the Threats page in TAP Dashboard to review all messages related to a phishing campaign that contain an attachment. What is the correct method to filter these messages?

A. Open the Impacted tab to display users exposed to a threat. B. Use the threat filter to set the category, grouping, and type. C. Type campaign: phishing & type: attachment into the search bar. D. Select the Highlighted tab to review Notable Techniques.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Proofpoint Certified Threat Protection Analyst - PPAN01 Exam Practice Test