8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A city government uses IoT Security to monitor traffic cameras and environmental sensors. The security team wants to ensure that these devices cannot communicate with each other or with the internet, but they need to send data to the central management server. Which policy should they implement?

   • AAllow all traffic between IoT devices and deny traffic to the central management server.
   • BAllow all traffic from the IoT devices to the central management server and deny all other traffic.
   • CDeny all traffic from IoT devices, including to the central management server.
   • DAllow all traffic between IoT devices and the internet.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does Palo Alto Networks IoT Security integrate with firewalls and Panorama?

   • ABy requiring all traffic to be decrypted at the firewall
   • BBy replacing the firewall's threat prevention capabilities
   • CBy sharing device context and enabling consistent policy enforcement across the network
   • DBy storing all firewall logs in the IoT Security cloud
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of behavioral fingerprinting in IoT device identification?

   • ATo actively scan open ports on the device
   • BTo authenticate users accessing the device
   • CTo replace the need for MAC address identification entirely
   • DTo identify devices based on their typical communication patterns and activities
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A large enterprise uses Panorama to manage firewalls in multiple data centers. They want to ensure that IoT Security device context is available to all firewalls for consistent policy enforcement. What should they configure?

   • AUse a third-party SIEM to distribute device context to firewalls.
   • BEnable IoT Security on each firewall individually and configure local device groups.
   • CIntegrate IoT Security with Panorama and use shared device groups to distribute device context.
   • DManually export device lists from IoT Security and import them into each firewall.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm uses IoT Security to monitor ATMs. The security team receives a report that several ATMs have a high risk score due to outdated firmware and exposure to the corporate network. They want to reduce the risk without causing downtime. Which action should they take?

   • AImmediately block all traffic to and from the ATMs.
   • BIgnore the risk because ATMs are critical devices.
   • CIncrease the risk score threshold so the ATMs no longer trigger alerts.
   • DSchedule a firmware update during a maintenance window and use temporary segmentation to limit exposure.
   Reveal Solution Discussion Select an answer first