A manufacturing company uses IoT Security to monitor robotic arms on the production line. The security team receives an alert that a robotic arm has a CVE with a CVSS score of 9.8, but the device is not exposed to the internet and is isolated on a separate VLAN. The team is considering whether to take immediate action. What should they do?

Immediately quarantine the robotic arm by blocking all its traffic.

Review the risk score and exposure details in IoT Security to determine if the CVE is actually exploitable in this environment.

Ignore the alert because the device is isolated on a separate VLAN.

Apply the vendor's firmware patch immediately without a maintenance window.

Which of the following is an example of an automated remediation action in an IoT Security workflow?

Quarantining a compromised device by applying a firewall policy

Sending an email to the security team for manual review

Updating the device's firmware automatically

Creating a ticket in a ticketing system

A hospital network has a mix of IP cameras, badge readers, and infusion pumps. The security team wants to enforce a policy that allows these devices to communicate only with their management servers and blocks all other traffic. They need to ensure the policy is based on accurate device identification. Which approach should the IoT Security administrator take to achieve the most reliable device identification for policy enforcement?

Use passive network monitoring combined with behavioral fingerprinting to profile each device type.

Enable active scanning of all IoT subnets to force devices to respond to fingerprinting probes.

Rely solely on MAC address OUI lookup to classify devices, since it is the most accurate method.

Create static IP-to-MAC bindings for every IoT device and manually assign device types in the firewall.

A hotel chain has deployed IoT Security to gain visibility into smart locks, thermostats, and entertainment systems. The security team wants to identify which devices are most at risk and prioritize their efforts. Which IoT Security capability should they use?

Vulnerability assessment to list CVEs for each device.

Device profiling to identify the make and model of each device.

Policy enforcement to block risky devices automatically.

Risk assessment to score devices based on vulnerabilities, exposure, and business impact.

Which security control can be enforced using device context in IoT Security policies?

Segmentation and access control

Data encryption at rest on the device

Palo Alto NetworksCertified Network Security Architect

Domain 8Objective 5

8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Securing IoT Environments domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

27questions here

6free pages

6concepts

11%of the exam

Questions 16–20

16expert · hard
A manufacturing company uses IoT Security to monitor robotic arms on the production line. The security team receives an alert that a robotic arm has a CVE with a CVSS score of 9.8, but the device is not exposed to the internet and is isolated on a separate VLAN. The team is considering whether to take immediate action. What should they do?
Select an answer first
17foundation · easy
Which of the following is an example of an automated remediation action in an IoT Security workflow?
Select an answer first
18application · medium
A hospital network has a mix of IP cameras, badge readers, and infusion pumps. The security team wants to enforce a policy that allows these devices to communicate only with their management servers and blocks all other traffic. They need to ensure the policy is based on accurate device identification. Which approach should the IoT Security administrator take to achieve the most reliable device identification for policy enforcement?
Select an answer first
19application · medium
A hotel chain has deployed IoT Security to gain visibility into smart locks, thermostats, and entertainment systems. The security team wants to identify which devices are most at risk and prioritize their efforts. Which IoT Security capability should they use?
Select an answer first
20foundation · easy
Which security control can be enforced using device context in IoT Security policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–20

Which of the following is an example of an automated remediation action in an IoT Security workflow?

A hotel chain has deployed IoT Security to gain visibility into smart locks, thermostats, and entertainment systems. The security team wants to identify which devices are most at risk and prioritize their efforts. Which IoT Security capability should they use?

Which security control can be enforced using device context in IoT Security policies?

Keep studying — Securing IoT Environments