A company uses a SaaS application to store customer data. The vendor offers two deployment options: one in a region with lower cost but weaker data protection laws, and another in a region with stricter laws but higher cost. The company must balance cost and compliance. What is the BEST decision?

Choose the region with stricter data protection laws

Choose the lower-cost region and accept the risk

Negotiate with the vendor to keep data in both regions

Choose the lower-cost region and encrypt all data

A company hosts a private application that processes financial transactions. The security team must choose between implementing multi-factor authentication (MFA) for all users or deploying an intrusion prevention system (IPS) to block malicious traffic. The company has a limited budget and must address the highest risk. Which approach is MORE critical for protecting the CIA triad?

Neither is necessary if the application is on a private network

Deploy IPS to block malicious traffic

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 3Objective 2

3.2 Identify Challenges Related to Confidentiality, Integrity, and Availability of Information and Applications CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Part of the Secure Access domain, which accounts for 14% of the CYBERSECURITY-PRACTITIONER exam.

24questions here

5free pages

6concepts

14%of the exam

Questions 21–24

21expert · hard
A company uses a SaaS application to store customer data. The vendor offers two deployment options: one in a region with lower cost but weaker data protection laws, and another in a region with stricter laws but higher cost. The company must balance cost and compliance. What is the BEST decision?
Select an answer first
22expert · hard
A company hosts a private application that processes financial transactions. The security team must choose between implementing multi-factor authentication (MFA) for all users or deploying an intrusion prevention system (IPS) to block malicious traffic. The company has a limited budget and must address the highest risk. Which approach is MORE critical for protecting the CIA triad?
Select an answer first
23application · medium
A law firm stores client case files, internal memos, and public legal articles. The firm wants to implement encryption for data at rest. Which data should be encrypted FIRST based on sensitivity?
Select an answer first
24foundation · medium
An attacker steals a company's proprietary AI model by querying it repeatedly and using the responses to create a copy. Which AI-specific security challenge is this?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

3.2 Identify Challenges Related to Confidentiality, Integrity, and Availability of Information and Applications CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–24

A company uses a SaaS application to store customer data. The vendor offers two deployment options: one in a region with lower cost but weaker data protection laws, and another in a region with stricter laws but higher cost. The company must balance cost and compliance. What is the BEST decision?

A law firm stores client case files, internal memos, and public legal articles. The firm wants to implement encryption for data at rest. Which data should be encrypted FIRST based on sensitivity?

An attacker steals a company's proprietary AI model by querying it repeatedly and using the responses to create a copy. Which AI-specific security challenge is this?

Keep studying — Secure Access