1.6 Create and Apply Data Security Profiles NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company needs to detect and block the transmission of social security numbers (SSNs) in outbound traffic. They also want to detect a custom employee ID format that is not predefined. Which combination of data patterns should be used in a data security profile?

   • AUse only the predefined 'Social Security Numbers' pattern.
   • BUse only a custom pattern for the employee ID.
   • CUse the predefined 'Credit Card Numbers' pattern and a custom pattern for the employee ID.
   • DUse the predefined 'Social Security Numbers' pattern and a custom pattern for the employee ID.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Where do you apply a data security profile to enforce data loss prevention on specific traffic?

   • AIn an interface management profile
   • BIn a decryption profile
   • CIn a security policy rule
   • DIn a zone protection profile
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A company needs to detect and block the transmission of both credit card numbers and a custom employee ID format. The employee ID format is: three uppercase letters, a hyphen, and five digits (e.g., ABC-12345). The administrator wants to create a data security profile. Which configuration should be used?

   • AUse only the predefined 'Credit Card Numbers' pattern.
   • BUse the predefined 'Social Security Numbers' pattern and a custom pattern with regex [A-Z]{3}-[0-9]{5}.
   • CUse only a custom pattern with regex [A-Z]{3}-[0-9]{5}.
   • DUse the predefined 'Credit Card Numbers' pattern and a custom pattern with regex [A-Z]{3}-[0-9]{5}.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which two components are used to define a custom data pattern in Palo Alto Networks?

   • AApplication IDs and user IDs
   • BURL categories and threat signatures
   • CRegular expressions and file properties
   • DIP addresses and port numbers
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company wants to block the upload of files containing social security numbers (SSNs) to a public cloud storage service. They have an existing security policy rule that permits outbound HTTPS traffic to the storage service. The administrator has created a data security profile with the predefined 'Social Security Numbers' pattern set to 'block'. What additional step is required to enforce this policy?

   • AConfigure a response page to inform users when a block occurs.
   • BApply the data security profile to the existing outbound security rule.
   • CEnable the data filtering profile on the same security rule.
   • DCreate a new security rule with a 'deny' action and apply the profile to it.
   Reveal Solution Discussion Select an answer first