8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of alerting and remediation workflows in IoT Security?

   • ATo automatically patch all IoT devices
   • BTo trigger automated or manual responses to IoT threats based on device insights
   • CTo replace the need for security analysts
   • DTo generate compliance reports only
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which three capabilities are core to Palo Alto Networks IoT Security's device security offering?

   • ADevice profiling, vulnerability assessment, and policy enforcement
   • BPatch management, endpoint protection, and data loss prevention
   • CUser authentication, role-based access control, and multi-factor authentication
   • DNetwork segmentation, threat intelligence feeds, and log aggregation
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does device context enable policy enforcement for IoT devices?

   • ABy automatically patching vulnerabilities on the device
   • BBy replacing the need for firewall rules
   • CBy allowing policies to be based on device type, risk level, and other attributes
   • DBy requiring all IoT devices to use the same security policy
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A manufacturing company uses IoT Security to monitor programmable logic controllers (PLCs) on the factory floor. The security team receives an alert that a specific PLC model has a known CVE with a high CVSS score and is directly exposed to the corporate network. The team wants to prioritize remediation efforts. Which action should they take first?

   • AApply the vendor's firmware patch immediately to all PLCs of the same model.
   • BImmediately block all traffic to and from the affected PLC using a firewall rule.
   • CDisable the PLC's network interface until the CVE is resolved.
   • DCheck the device's risk score and exposure details in IoT Security to determine if the CVE is actually exploitable in this environment.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A hospital has deployed IoT Security and is enforcing segmentation for IoT devices. The security team wants to automatically quarantine a compromised infusion pump, but they are concerned about disrupting patient care. They also need to ensure that the quarantine policy is consistent across their two data centers managed by Panorama. The infusion pumps are identified by a dynamic address group. What is the best approach?

   • ACreate a policy in Panorama that denies all traffic from the infusion pump dynamic address group, and push it to both data centers.
   • BUse IoT Security to trigger a quarantine action that adds the compromised pump to a 'quarantine' dynamic address group, and have Panorama push a policy that denies all traffic from that group.
   • CManually block the compromised pump's IP address on the local firewall in the data center where it is connected.
   • DCreate a policy in Panorama that allows traffic from the infusion pump dynamic address group only to the medication server, and push it to both data centers.
   Reveal Solution Discussion Select an answer first