2.9 Explain the Security Function of Precision AI CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security operations center (SOC) is overwhelmed by a high volume of alerts, many of which are false positives. They have deployed Palo Alto Networks products with Precision AI. What should they expect Precision AI to do to address this issue?

   • AIncrease the volume of alerts by adding more detection rules
   • BRequire analysts to manually review every alert to determine its validity
   • CAutomatically disable alerts that are not associated with a known signature
   • DReduce alert fatigue by correlating and prioritizing alerts based on AI-driven analysis
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security administrator notices that a new ransomware variant is evading the firewall's traditional signature-based detection. The firewall is running Precision AI. What should the administrator expect Precision AI to do in this situation?

   • AAutomatically create a new signature for the ransomware and deploy it to all firewalls
   • BBlock all encrypted traffic to prevent the ransomware from communicating
   • CQuarantine the entire network segment where the ransomware was detected
   • DUse behavioral analysis and machine learning to identify the ransomware based on its actions and characteristics
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team is configuring automated response for a new threat detected by Precision AI. They want to ensure that the response is effective but does not disrupt business operations. Which approach should they take?

   • AOnly send alerts to the security team and wait for manual approval before taking any action
   • BAutomatically block all traffic from the affected user group until the threat is manually reviewed
   • CConfigure automated response to isolate affected endpoints and block malicious traffic, with a rollback mechanism if business impact is detected
   • DAutomatically shut down the affected servers to prevent lateral movement
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does Precision AI primarily enhance threat detection compared to traditional signature-based methods?

   • ABy blocking all traffic that contains encrypted content
   • BBy using machine learning models to identify unknown and evasive threats
   • CBy relying exclusively on known threat signatures
   • DBy requiring manual analysis of every alert
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has deployed Palo Alto Networks Cortex XDR and NGFWs with Precision AI. An alert is triggered for a suspicious PowerShell command on an endpoint. The security team wants the system to automatically respond to contain the threat on the endpoint and prevent lateral movement. What should they configure?

   • AAn automated response policy in Cortex XDR that isolates the endpoint and blocks the malicious command
   • BA firewall rule that blocks all PowerShell traffic from the endpoint
   • CA SIEM integration that sends the alert to the security team for a decision
   • DA manual runbook that instructs analysts to isolate the endpoint after reviewing the alert
   Reveal Solution Discussion Select an answer first