What is the core principle of Zero Trust that applies to application access?

Trust users based on their network location.

Use a single firewall rule to allow all applications.

Allow all traffic that is encrypted.

Grant users the minimum level of access required to perform their job.

In a Zero Trust architecture, how should access to a specific application be treated?

As a decision based solely on the user's group membership.

As a dynamic decision that can be re-evaluated based on changing context.

As a static rule that never changes.

As a one-time decision based on the user's initial login.

A global company has a policy that access to a financial application is allowed only for the 'Finance' group. However, the company also has a 'Finance-Contractors' group that needs temporary access for a project. The firewall is integrated with Active Directory. The security architect wants to avoid creating a separate rule for the contractors. What is the most efficient way to grant the contractors access while maintaining the policy?

Create a rule that allows all users from the Finance department's IP subnet to access the application.

Create a rule that allows the 'Finance-Contractors' group to access the application only during business hours.

Create a new rule that allows the 'Finance-Contractors' group to access the application.

Add the 'Finance-Contractors' group to the existing rule that allows the 'Finance' group.

Which of the following is an example of a contextual factor that can influence access to an application?

The color scheme of the application's interface.

The user's device posture, such as whether it is compliant with security policies.

The application's version number.

The number of users currently using the application.

A network administrator notices that a policy rule intended to allow access to a specific SaaS application is also matching traffic to other web applications. The rule uses a destination IP address and port 443. The administrator wants to ensure the policy only applies to the intended application. What should the administrator do?

Keep the rule as is, since port 443 is specific enough for HTTPS traffic.

Create a rule that allows traffic to the destination IP address and blocks all other IP addresses.

Add a rule to deny all other web applications before the allow rule.

Change the rule to use the application's App-ID instead of the destination IP address.

Palo Alto NetworksCertified Network Security Architect

Domain 1Objective 3

1.3 Differentiate Access to Specific Applications NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Part of the Zero Trust Enterprise domain, which accounts for 8% of the NETWORK-SECURITY-ARCHITECT exam.

15questions here

3free pages

5concepts

8%of the exam

Questions 11–15

11foundation · easy
What is the core principle of Zero Trust that applies to application access?
Select an answer first
12foundation · easy
In a Zero Trust architecture, how should access to a specific application be treated?
Select an answer first
13expert · hard
A global company has a policy that access to a financial application is allowed only for the 'Finance' group. However, the company also has a 'Finance-Contractors' group that needs temporary access for a project. The firewall is integrated with Active Directory. The security architect wants to avoid creating a separate rule for the contractors. What is the most efficient way to grant the contractors access while maintaining the policy?
Select an answer first
14foundation · easy
Which of the following is an example of a contextual factor that can influence access to an application?
Select an answer first
15application · medium
A network administrator notices that a policy rule intended to allow access to a specific SaaS application is also matching traffic to other web applications. The rule uses a destination IP address and port 443. The administrator wants to ensure the policy only applies to the intended application. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

1.3 Differentiate Access to Specific Applications NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

What is the core principle of Zero Trust that applies to application access?

In a Zero Trust architecture, how should access to a specific application be treated?

Which of the following is an example of a contextual factor that can influence access to an application?

Keep studying — Zero Trust Enterprise