2.9 Explain the Security Function of Precision AI CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security administrator is configuring automated response for a new malware variant detected by Precision AI. The malware is spreading through email attachments. The administrator wants to block the malware at the email gateway and also prevent it from spreading on the network. What should they configure?

   • AOnly block the attachment at the email gateway and rely on users to report any infections
   • BDisable email attachments for all users until the malware is contained
   • CIntegrate the email gateway with Precision AI to automatically block the attachment and update firewall policies to block the malware's network traffic
   • DSend an alert to the security team to manually block the malware on the email gateway and firewall
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A managed security service provider (MSSP) monitors multiple customer environments. They have deployed Palo Alto Networks firewalls with Precision AI. A new malware variant is detected on one customer's network. The MSSP wants to automatically contain the threat across all customers that share similar traffic patterns, without waiting for human analysis. Which feature of Precision AI should they use?

   • ASending alerts to a SIEM for analysts to review and decide on actions
   • BManual creation of a custom signature and deployment via a change management process
   • CIsolating the affected endpoint by disabling its network port on the switch
   • DAutomated threat intelligence sharing and policy updates across the firewall fleet
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses Palo Alto Networks Prisma Access for remote users and also has on-premises NGFWs. They want to ensure that threat detections from one location automatically inform the security posture of the other. Which integration capability of Precision AI should they enable?

   • AManual export of logs from Prisma Access and import into on-premises firewalls
   • BCloud-delivered threat intelligence that synchronizes across Prisma Access and on-premises firewalls
   • CUsing a VPN tunnel to connect the on-premises firewall to Prisma Access for management
   • DA separate SIEM that aggregates logs from both platforms for analysis
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team at a financial services firm is evaluating a next-generation firewall (NGFW) to replace a legacy signature-based IPS. The firm processes a high volume of encrypted traffic and has seen an increase in zero-day phishing attempts that evade traditional detection. They need a solution that can identify malicious content in encrypted traffic without requiring a full man-in-the-middle decryption of every session. Which Precision AI capability should the team rely on to meet this requirement?

   • AFull SSL/TLS decryption with a corporate certificate installed on all endpoints
   • BManual threat hunting by analysts using packet captures and log review
   • CAI-powered inline deep learning that inspects encrypted traffic metadata and flow characteristics
   • DSignature-based IPS updates delivered every hour to catch known exploits
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team wants to ensure that when Precision AI detects a new command-and-control (C2) domain, the firewall automatically blocks traffic to that domain across all user groups. What should they configure?

   • AConfigure the firewall to send an alert to the administrator for manual approval before blocking
   • BEnable dynamic updates from Precision AI that automatically create and apply a new security policy to block the domain
   • CUse a third-party DNS sinkhole to redirect traffic from the domain
   • DCreate a static security policy that blocks all traffic to unknown domains
   Reveal Solution Discussion Select an answer first