How does API-based SaaS security typically access data in a cloud application?

By installing an agent on each user's device to monitor local files

By using the application's API to connect and scan data at rest

By replicating the entire SaaS environment to a separate security appliance

By intercepting network packets as they travel to the application

A security architect is comparing two solutions for a SaaS app that has a very large volume of historical data. Solution A uses API-based security to scan all files at rest. Solution B uses inline security to inspect new traffic only. The company needs to ensure that all existing sensitive data is identified and remediated, and also wants to prevent new sensitive data from being stored. Which solution should they choose?

Both Solution A and Solution B, because they cover at-rest and in-motion data respectively

Neither, because the company should use SSPM to enforce data policies

Solution A only, because it can scan existing data and also block new uploads via API integration

Solution B only, because it can inspect new traffic and also retroactively scan via logs

A company wants to implement a data protection strategy for a sanctioned SaaS app. They have a requirement to block uploads of files containing credit card numbers in real time. They also need to detect and quarantine any such files that were uploaded before the policy was implemented. The security architect must choose a solution that meets both requirements with minimal operational overhead. Which solution should they choose?

Deploy inline security only, and manually review logs for existing files

Deploy inline SaaS security with DLP, and enable API-based scanning for existing files

Deploy SSPM with a policy to block credit card uploads

Deploy API-based security only, and rely on user training to prevent future uploads

A company wants to prevent users from uploading files containing social security numbers to a sanctioned file-sharing app. They also want to detect and quarantine any such files that are already stored in the app. Which combination of capabilities should be deployed?

SSPM with a policy to disable file uploads

Inline SaaS security with DLP for uploads, and API-based SaaS security for existing files

What is the primary role of advanced web filtering in a SaaS security architecture?

To encrypt data in transit between users and cloud apps

To scan files stored in SaaS apps for sensitive data

To assess the security posture of SaaS applications

To control which web destinations users can access, including cloud apps, based on policy

Palo Alto NetworksCertified Network Security Architect

Domain 7Objective 1

7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Part of the Data Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

19questions here

4free pages

4concepts

7%of the exam

Questions 11–15

11foundation · easy
How does API-based SaaS security typically access data in a cloud application?
Select an answer first
12expert · hard
A security architect is comparing two solutions for a SaaS app that has a very large volume of historical data. Solution A uses API-based security to scan all files at rest. Solution B uses inline security to inspect new traffic only. The company needs to ensure that all existing sensitive data is identified and remediated, and also wants to prevent new sensitive data from being stored. Which solution should they choose?
Select an answer first
13expert · hard
A company wants to implement a data protection strategy for a sanctioned SaaS app. They have a requirement to block uploads of files containing credit card numbers in real time. They also need to detect and quarantine any such files that were uploaded before the policy was implemented. The security architect must choose a solution that meets both requirements with minimal operational overhead. Which solution should they choose?
Select an answer first
14application · medium
A company wants to prevent users from uploading files containing social security numbers to a sanctioned file-sharing app. They also want to detect and quarantine any such files that are already stored in the app. Which combination of capabilities should be deployed?
Select an answer first
15foundation · easy
What is the primary role of advanced web filtering in a SaaS security architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

How does API-based SaaS security typically access data in a cloud application?

A company wants to prevent users from uploading files containing social security numbers to a sanctioned file-sharing app. They also want to detect and quarantine any such files that are already stored in the app. Which combination of capabilities should be deployed?

What is the primary role of advanced web filtering in a SaaS security architecture?

Keep studying — Data Security