A company wants to block the transfer of files containing employee IDs, but only if the IDs are in their HR database. They also want to block any file containing a generic social security number pattern. Which policy configuration should they use?

Use regex for both employee IDs and SSNs

Use EDM for employee IDs and regex for SSNs

Use EDM for both employee IDs and SSNs

Use ML for both employee IDs and SSNs

What is a key characteristic of a regex classifier in DLP?

It uses regular expressions to define flexible patterns for matching sensitive data

It creates a fingerprint of a document and compares it to an index

It requires an exact match against a list of known values

It analyzes the context and meaning of data using natural language processing

A law firm needs to ensure that scanned copies of confidential contracts are not emailed externally. The contracts are stored as PDFs that are actually images. Which DLP capability is essential to detect the sensitive content in these files?

Optical Character Recognition (OCR)

Indexed Document Matching (IDM)

A corporation wants to block the transfer of any document that contains a specific confidential template, but they do not want to block documents that merely contain similar text. Which DLP method should they use?

Machine Learning (ML) classification

Indexed Document Matching (IDM)

Palo Alto NetworksCertified Network Security Architect

Domain 7Objective 3

7.3 Analyze and Architect to Enterprise DLP Functionality NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Part of the Data Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

28questions here

6free pages

8concepts

7%of the exam

Questions 21–25

21application · medium
A company wants to block the transfer of files containing employee IDs, but only if the IDs are in their HR database. They also want to block any file containing a generic social security number pattern. Which policy configuration should they use?
Select an answer first
22foundation · easy
What is a key characteristic of a regex classifier in DLP?
Select an answer first
23application · medium
A legal firm needs to ensure that scanned copies of a specific merger agreement are not sent externally. The agreement is stored as an image PDF. Which DLP features must be combined to detect this document?
Select an answer first
24application · medium
A law firm needs to ensure that scanned copies of confidential contracts are not emailed externally. The contracts are stored as PDFs that are actually images. Which DLP capability is essential to detect the sensitive content in these files?
Select an answer first
25application · medium
A corporation wants to block the transfer of any document that contains a specific confidential template, but they do not want to block documents that merely contain similar text. Which DLP method should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.