3.8 Identify and Describe Data Security Classification Settings and Scanning Options CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–8

1. 6foundation · easy

   How are data security scanning options typically applied to cloud resources in the Palo Alto Networks platform?

   • ABy configuring scan profiles that are assigned to resource groups or accounts
   • BBy writing custom scripts that run on a schedule
   • CBy manually triggering a scan from the cloud provider's console
   • DBy installing an agent on each individual virtual machine
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A multinational company uses Prisma Cloud to classify data in its Google Cloud Storage buckets. The legal team requires that data residency be respected: personal data of EU citizens must not be flagged as sensitive if it is stored in a non-EU region. The security team needs to ensure classification only applies to buckets in specific regions. What should they configure?

   • ACreate separate data profiles for each region and assign them to the respective buckets.
   • BDisable data classification for all buckets and rely on manual review.
   • CApply data profiles to all buckets and use a post-scan filter to exclude non-EU regions.
   • DUse the region as a filter in the data classification policy to include only EU-based buckets.
   Reveal Solution Discussion Select an answer first
3. 8foundation · easy

   In the Palo Alto Networks cloud security platform, what is the primary purpose of data classification settings?

   • ATo set permissions for who can access classified data in the cloud environment
   • BTo determine the physical storage location of data across cloud regions
   • CTo configure the encryption algorithms applied to data at rest in cloud storage
   • DTo define which data patterns and labels are used to identify sensitive information in cloud resources
   Reveal Solution Discussion Select an answer first