A healthcare organization is about to deploy a large language model (LLM) for clinical documentation. Before production rollout, the security team must identify whether the model can be manipulated to reveal patient data through crafted inputs. Which Prisma AIRS activity should they perform first?

AI Red Teaming to probe the model with adversarial prompts

AI Runtime Security to monitor live inference traffic

Kubernetes integration to secure the model's hosting environment

AI Model Scanning to check the model file for embedded malware

What is the overall scope of Prisma AIRS AI security capabilities?

Only protection of AI applications

Protection of AI models, data, and applications

Which scenario is addressed by Prisma AIRS runtime security?

A user accesses a malicious AI-related website

A model file contains a hidden backdoor

An attacker attempts to exploit a prompt injection during inference

An employee uploads sensitive data to a public AI chatbot

A marketing agency wants to allow employees to use approved AI writing tools but block shadow IT AI services that are not sanctioned. The security team needs a solution that identifies AI applications regardless of the URL or domain used. Which AI Access capability should they rely on?

Advanced URL Filtering to categorize AI-related domains

App-ID Cloud Engine to identify AI applications by their traffic patterns

Advanced Threat Prevention to block malicious AI traffic

Enterprise DLP to inspect content sent to AI services

Which type of issue is AI model scanning in Prisma AIRS designed to detect?

Malicious prompts sent to a deployed model

Unauthorized access to AI application APIs

Tampering with model weights or architecture

Data exfiltration via AI chatbots

Palo Alto NetworksCertified Network Security Architect

Domain 2Objective 1

2.1 Differentiate Between and Explain the Specific Palo Alto Networks Products That Make up Prisma AI Runtime Security (AIRS) and AI Access NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Part of the AI Security domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

38questions here

8free pages

11concepts

11%of the exam

11 Concepts in This Objective

Prisma AIRS AI Red Teaming
Prisma AIRS AI Model Scanning
Prisma AIRS AI Runtime Security
Prisma AIRS AI Security
Prisma AIRS AI Agents
Prisma AIRS Kubernetes Integration
Prisma AIRS Microsegmentation
AI Access App-ID Cloud Engine
AI Access Advanced Threat Prevention
AI Access Advanced URL Filtering
AI Access Enterprise DLP

Questions 6–10

6application · medium
A healthcare organization is about to deploy a large language model (LLM) for clinical documentation. Before production rollout, the security team must identify whether the model can be manipulated to reveal patient data through crafted inputs. Which Prisma AIRS activity should they perform first?
Select an answer first
7foundation · easy
What is the overall scope of Prisma AIRS AI security capabilities?
Select an answer first
8foundation · easy
Which scenario is addressed by Prisma AIRS runtime security?
Select an answer first
9application · medium
A marketing agency wants to allow employees to use approved AI writing tools but block shadow IT AI services that are not sanctioned. The security team needs a solution that identifies AI applications regardless of the URL or domain used. Which AI Access capability should they rely on?
Select an answer first
10foundation · easy
Which type of issue is AI model scanning in Prisma AIRS designed to detect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.