8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which combination of techniques does Palo Alto Networks IoT Security use to identify and profile devices?

   • APassive and active techniques, including MAC address, OS, and behavioral fingerprinting
   • BOnly active scanning with credential-based authentication
   • CManual inventory entry by administrators for each device
   • DOnly passive monitoring of network traffic without any device interaction
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A smart building management company uses IoT Security to monitor HVAC controllers and lighting systems. The security team wants to automate the response to a detected anomaly, such as a device communicating with an unknown external IP. They are concerned about false positives causing unnecessary disruption. Which workflow should they implement?

   • ACreate an alert that notifies the security team, who then manually review and decide whether to block.
   • BAutomatically block traffic to the unknown external IP but allow other traffic from the device.
   • CAutomatically block all traffic from the device as soon as an anomaly is detected.
   • DIgnore the anomaly because it may be a false positive.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A logistics company has deployed IoT Security and notices that some devices are incorrectly classified as 'unknown' because they use encrypted protocols. The security team wants to improve device identification for these devices. Which technique should they enable?

   • ARely on DHCP fingerprinting to identify the device OS.
   • BEnable SSL decryption on the firewall to inspect encrypted traffic from IoT devices.
   • CUse active fingerprinting to send probes to the devices and analyze their responses.
   • DManually assign device types based on IP address ranges.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the role of Panorama in an IoT Security deployment?

   • ATo perform deep packet inspection on IoT traffic
   • BTo provide centralized management and consistent policy distribution to firewalls
   • CTo store IoT device credentials securely
   • DTo replace the IoT Security cloud service
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A security architect wants to use Palo Alto Networks IoT Security to reduce risk from unmanaged IoT devices. Which capability directly enables the creation of security rules based on device type and risk?

   • AVulnerability assessment
   • BDevice profiling
   • CPolicy enforcement
   • DLog aggregation
   Reveal Solution Discussion Select an answer first