2.8 Identify and Describe Palo Alto Networks Cloud-Delivered Security Services (CDSS) CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A manufacturing company has deployed hundreds of IP cameras and environmental sensors on a separate network segment. The IT team is concerned that these devices may be vulnerable to exploitation and wants to gain visibility into their behavior, identify potential vulnerabilities, and enforce security policies specifically for these devices. Which CDSS capability should the team implement?

   • AThreat Prevention
   • BEnterprise DLP
   • CWildFire
   • DIoT Security
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does CDSS DNS Security protect against malicious domains?

   • ABy using cloud-delivered threat intelligence to identify and block malicious DNS queries
   • BBy blocking all DNS traffic by default
   • CBy sandboxing DNS queries
   • DBy requiring users to manually approve DNS queries
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a category of Palo Alto Networks Cloud-Delivered Security Services?

   • ANetwork Access Control
   • BThreat Prevention
   • CVirtual Private Network
   • DIntrusion Detection System
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security operations center (SOC) analyst is investigating a series of alerts where the firewall blocked outbound connections to a known malicious IP address. The analyst wants to understand how the firewall was able to identify this IP as malicious and whether the protection is based on real-time intelligence. Which CDSS capability provides this real-time threat intelligence?

   • AThreat Prevention
   • BIoT Security
   • CEnterprise DLP
   • DURL Filtering
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company allows employees to use Microsoft 365 and Salesforce but has noticed that some employees are using an unsanctioned file-sharing service to transfer corporate documents. The security team wants to gain visibility into the use of both sanctioned and unsanctioned SaaS applications and enforce policies to control their usage. Which CDSS capability should be implemented?

   • ASaaS Security
   • BWildFire
   • CURL Filtering
   • DIoT Security
   Reveal Solution Discussion Select an answer first