8.5 Confirm and Design to Device Security Capabilities NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a factor that Palo Alto Networks IoT Security considers when assessing the risk of an IoT device?

   • AThe color and model of the device
   • BThe device's physical location and manufacturer warranty status
   • CThe number of users who have administrative access to the device
   • DKnown CVEs, misconfigurations, and exposure to the network
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A multinational organization uses Panorama to manage firewalls across multiple regions. The security team wants to deploy IoT Security policies consistently across all firewalls. What is the most efficient way to achieve this?

   • AUse Panorama to push IoT Security policies and device group configurations to all managed firewalls.
   • BRely on each region's firewall to independently discover IoT devices and enforce local policies.
   • CConfigure the same policies individually on each firewall using the local management interface.
   • DExport the IoT Security configuration from one firewall and import it into the others.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What does 'exposure' refer to in the context of IoT device risk assessment?

   • AThe amount of data the device stores locally
   • BThe physical environment where the device is installed
   • CThe number of security patches the device has received
   • DThe degree to which a device is reachable or accessible from other networks or the internet
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A hospital has deployed IoT Security and is having trouble identifying some medical devices that use proprietary protocols. The devices are critical to patient care, and the security team is concerned about disrupting them. Which approach should they take to improve identification?

   • AUse passive monitoring and behavioral fingerprinting to identify the devices over time.
   • BUse DHCP fingerprinting to identify the devices.
   • CManually add the devices to the IoT Security inventory with a custom device type.
   • DEnable active scanning on the medical device subnet to force devices to respond to fingerprinting probes.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A utility company uses IoT Security to monitor smart meters. The security team wants to automate the response to a detected malware infection on a smart meter, but they are concerned about the impact on the power grid. Which remediation workflow should they design?

   • AIgnore the infection because smart meters are low-risk devices.
   • BSend an alert to the security team and wait for manual action.
   • CAutomatically isolate the meter from the corporate network but allow communication with the grid management system.
   • DAutomatically quarantine the infected meter by blocking all its traffic.
   Reveal Solution Discussion Select an answer first