A company needs to prevent sensitive data from being shared externally via sanctioned SaaS apps. They also want to detect if sensitive data has already been shared externally. Which combination of solutions should they implement?

Inline DLP to block external sharing in real time, and API-based security to scan existing shared items

SSPM with external sharing policies

A company has a mix of managed and unmanaged devices. Users access Salesforce from both corporate laptops and personal phones. The security team needs to detect and remediate sensitive data that is already stored in Salesforce, regardless of how it got there. Which solution should they choose?

Advanced web filtering with a block rule for Salesforce

Inline SaaS security for all user traffic to Salesforce

SSPM to check Salesforce security settings

API-based SaaS security connected to Salesforce

A security architect is designing a SaaS security solution. The company has a strict compliance requirement to continuously audit configuration changes in Microsoft 365 and Salesforce. They also need to detect and quarantine malware in files stored in these apps. The budget is limited, so they must choose a single solution that covers both requirements. Which solution should they choose?

Advanced web filtering with malware protection

API-based SaaS security with SSPM capabilities

A security architect is evaluating tools to reduce risk in their SaaS environment. They need to continuously monitor for misconfigurations, such as overly permissive sharing settings, and also detect sensitive data at rest. Which combination of capabilities should they deploy?

API-based SaaS security and advanced web filtering

SSPM for posture monitoring and API-based SaaS security for data at rest

Inline SaaS security and advanced web filtering

Palo Alto NetworksCertified Network Security Architect

Domain 7Objective 1

7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Data Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

19questions here

4free pages

4concepts

7%of the exam

Questions 16–19

16application · medium
A company needs to prevent sensitive data from being shared externally via sanctioned SaaS apps. They also want to detect if sensitive data has already been shared externally. Which combination of solutions should they implement?
Select an answer first
17application · medium
A company has a mix of managed and unmanaged devices. Users access Salesforce from both corporate laptops and personal phones. The security team needs to detect and remediate sensitive data that is already stored in Salesforce, regardless of how it got there. Which solution should they choose?
Select an answer first
18expert · hard
A security architect is designing a SaaS security solution. The company has a strict compliance requirement to continuously audit configuration changes in Microsoft 365 and Salesforce. They also need to detect and quarantine malware in files stored in these apps. The budget is limited, so they must choose a single solution that covers both requirements. Which solution should they choose?
Select an answer first
19application · medium
A security architect is evaluating tools to reduce risk in their SaaS environment. They need to continuously monitor for misconfigurations, such as overly permissive sharing settings, and also detect sensitive data at rest. Which combination of capabilities should they deploy?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–19

A company needs to prevent sensitive data from being shared externally via sanctioned SaaS apps. They also want to detect if sensitive data has already been shared externally. Which combination of solutions should they implement?

A company has a mix of managed and unmanaged devices. Users access Salesforce from both corporate laptops and personal phones. The security team needs to detect and remediate sensitive data that is already stored in Salesforce, regardless of how it got there. Which solution should they choose?

A security architect is evaluating tools to reduce risk in their SaaS environment. They need to continuously monitor for misconfigurations, such as overly permissive sharing settings, and also detect sensitive data at rest. Which combination of capabilities should they deploy?

Keep studying — Data Security