Certified Cybersecurity Associate Practitioner Paloalto Networks Study Notes

Phishing is a type of email attack where the attacker sends a lot of malicious emails in an untargeted way, pretending to be a trusted source, such as a bank or an online retailer, to trick users into revealing sensitive information, such as passwords or credit card numbers. Attackers use the information to steal money or to launch other attacks. A fake email from a bank asking you to click a link and verify your account details is an example of phishing1 References:

1: Palo Alto Networks Certified Cybersecurity Entry-level Technician - Palo Alto Networks

2: 10 Palo Alto Networks PCCET Exam Practice Questions - CBT Nuggets

3: Types of Email Attacks - Examples and Consequences - Tessian

4: What Is a Phishing Attack? Definition and Types - Cisco

Identity and access management (IAM) is a software service or framework that allows organizations to define user or group identities within software environments, then associate permissions with them. The identities and permissions are usually spelled out in a text file, which is referred to as an IAM policy.

According to the NIST definition of cloud computing1, there are three service models for cloud computing: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). In the SaaS model, the cloud provider delivers the software applications over the internet, and the users access them from various devices through a web browser or a program interface. The cloud provider manages the underlying infrastructure, including the servers, databases, and code of the applications. The users do not need to install, update, or maintain the software, and they only pay for the service they use. The scenario described in the question is an example of the SaaS model, as the user is provided access over the internet to an application running on a cloud infrastructure, and the vendor hosts and maintains the servers, databases, and code of that application. References:

SP 800-145, The NIST Definition of Cloud Computing | CSRC

Final Version of NIST Cloud Computing Definition Published

NIST Cloud Computing Program - NCCP | NIST

SaaS - User responsible for only the data, vendor responsible for rest

SOAR tools ingest aggregated alerts from detection sources (such as SIEMs, network security tools, and mailboxes) before executing automatable, process-driven playbooks to enrich and respond to these alerts.