2.1 Differentiate Between and Explain the Specific Palo Alto Networks Products That Make up Prisma AI Runtime Security (AIRS) and AI Access NETWORK-SECURITY-ARCHITECT Practice Questions (Page 8)

Questions 36–38

1. 36expert · hard

   A hospital allows doctors to use an AI medical reference tool. The security team must prevent patient health information (PHI) from being submitted to the tool, but doctors must still be able to use it for general medical queries. The team also wants to block known malicious AI-related websites. Which AI Access configuration meets both requirements?

   • AApp-ID Cloud Engine to block the tool and Advanced URL Filtering
   • BEnterprise DLP and Advanced Threat Prevention
   • CEnterprise DLP to block PHI and Advanced URL Filtering to block malicious AI sites
   • DAdvanced URL Filtering and App-ID Cloud Engine
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   How does AI Access use Advanced Threat Prevention?

   • ATo scan AI models for integrity issues
   • BTo manage access to AI-related URLs
   • CTo enforce least-privilege access for AI workloads
   • DTo protect against threats targeting AI applications
   Reveal Solution Discussion Select an answer first
3. 38expert · hard

   A multi-tenant SaaS provider runs multiple AI models in a shared Kubernetes cluster. Each tenant's model must be isolated so that a compromise in one model cannot be used to access another tenant's data. The security team must implement this isolation without disrupting the models' ability to communicate with their own approved backend services. Which approach should they take?

   • AApply microsegmentation policies per tenant to isolate AI workloads and enforce least-privilege access
   • BUse AI Model Scanning on each tenant's model before deployment
   • CDeploy AI Access with App-ID Cloud Engine to control tenant access
   • DEnable AI Runtime Security with global threat prevention policies
   Reveal Solution Discussion Select an answer first