1.7 Create and Apply Internet of Things (IoT) Security Profiles NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a valid component of an IoT security profile configuration?

   • AA schedule for when the profile is active
   • BA set of rules that define allowed or denied traffic based on IoT device attributes
   • CA configuration for VPN tunnels for IoT devices
   • DA list of allowed IP addresses for IoT devices
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How do you apply an IoT security profile to enforce IoT-specific controls?

   • ABy assigning it to a network interface
   • BBy configuring it globally on the firewall
   • CBy attaching it to a security policy rule
   • DBy enabling it in the IoT security module settings
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of an IoT security profile in Palo Alto Networks security policy?

   • ATo provide a logging mechanism for all IoT device traffic
   • BTo enforce security controls on traffic based on the type and behavior of IoT devices
   • CTo define the network topology and IP addressing scheme for IoT devices
   • DTo replace the need for traditional security policy rules
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following best describes the scope of an IoT security profile?

   • AIt is limited to traffic originating from IoT devices that match the profile's defined device types
   • BIt only affects traffic between IoT devices and the internet, not internal traffic
   • CIt applies to all traffic passing through the firewall regardless of source or destination
   • DIt automatically applies to all IoT devices discovered on the network without requiring policy configuration
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An energy company has created an IoT security profile to restrict smart meters from sending data to unauthorized servers. They have applied the profile to a security policy rule that matches traffic from the smart meters. What should they do next to ensure the profile is effective?

   • ACreate a new security policy rule for each smart meter to ensure coverage
   • BApply the IoT security profile to all security policy rules to ensure comprehensive coverage
   • CTest the policy by generating traffic from a smart meter and checking the logs to see if the profile's rules are enforced
   • DDisable the IoT security profile and rely on the firewall's default security settings
   Reveal Solution Discussion Select an answer first