A hospital has a mix of IoT devices including patient monitors, smart infusion pumps, and environmental sensors. The security team needs to discover all devices on the network. They have a SPAN port available and can also run active scans. Which approach will provide the most complete and accurate discovery?

Run active scans during off-hours.

Use passive monitoring on the SPAN port.

Combine passive monitoring with active scans.

A retail chain has deployed IoT sensors for inventory tracking. These sensors only need to communicate with the inventory management server. The security architect wants to enforce least-privilege access. Which enforcement strategy should be implemented?

Place sensors in a separate VLAN and allow only traffic to the inventory server.

Place sensors on the general user VLAN and rely on host firewalls.

Allow all traffic from sensors to any internal server.

Block all outbound traffic from sensors.

Which technique is used to discover IoT devices on a network by passively monitoring network traffic without sending any probes?

Passive network traffic analysis

Vulnerability scanning with Nessus

What is the primary purpose of an IoT risk assessment?

To evaluate the security posture of devices

To identify all devices on the network

Palo Alto NetworksCertified Network Security Architect

Domain 8Objective 1

8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Part of the Securing IoT Environments domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

21questions here

5free pages

5concepts

11%of the exam

Questions 6–10

6application · medium
A hospital has a mix of IoT devices including patient monitors, smart infusion pumps, and environmental sensors. The security team needs to discover all devices on the network. They have a SPAN port available and can also run active scans. Which approach will provide the most complete and accurate discovery?
Select an answer first
7foundation · easy
Which enforcement mechanism is used to isolate IoT devices from the rest of the network?
Select an answer first
8application · medium
A retail chain has deployed IoT sensors for inventory tracking. These sensors only need to communicate with the inventory management server. The security architect wants to enforce least-privilege access. Which enforcement strategy should be implemented?
Select an answer first
9foundation · easy
Which technique is used to discover IoT devices on a network by passively monitoring network traffic without sending any probes?
Select an answer first
10foundation · easy
What is the primary purpose of an IoT risk assessment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

Which enforcement mechanism is used to isolate IoT devices from the rest of the network?

A retail chain has deployed IoT sensors for inventory tracking. These sensors only need to communicate with the inventory management server. The security architect wants to enforce least-privilege access. Which enforcement strategy should be implemented?

Which technique is used to discover IoT devices on a network by passively monitoring network traffic without sending any probes?

What is the primary purpose of an IoT risk assessment?

Keep studying — Securing IoT Environments