6.2 Evaluate Advanced Security for Prisma SD-WAN NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital network uses Prisma SD-WAN. The security team must ensure that only registered medical devices (e.g., infusion pumps, patient monitors) can communicate with the hospital's electronic health record (EHR) system, while staff laptops must be blocked from direct access to the EHR system. Which combination of features should the team use?

   • ADevice-ID to identify the medical devices and a security policy that allows only those devices to reach the EHR system.
   • BApp-ID to identify the EHR application and a security policy that allows only the EHR application traffic.
   • CUser-ID to identify the staff and a security policy that blocks staff from the EHR system.
   • DURL Filtering to block the EHR system's web address for all users except medical devices.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A retail company uses Prisma SD-WAN. The security team wants to block malware downloads from the internet, but allow legitimate software updates from a specific vendor. The vendor's update server uses a domain that is not categorized as malicious. Which approach should the team take?

   • AEnable DNS Security to block malicious domains and allow the vendor's domain.
   • BEnable App-ID to block the applications used by malware and allow the vendor's update application.
   • CEnable URL Filtering to block the malware category and allow the vendor's domain.
   • DEnable Threat Prevention with antivirus and create an exception for the vendor's update domain.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of DNS Security in Prisma SD-WAN?

   • ATo protect against malicious domains by blocking DNS requests to them
   • BTo identify applications in network traffic
   • CTo identify users in network traffic
   • DTo control access to web categories
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A hospital network uses Prisma SD-WAN. The security team wants to allow medical devices to communicate with the EHR system, but block all other devices. The medical devices use a mix of wired and wireless connections, and some devices are not registered in the device inventory. Which approach should the team take?

   • AUse Device-ID to identify the medical devices and create a security policy that allows only those devices to reach the EHR system.
   • BUse App-ID to identify the EHR application and create a security policy that allows the application for all devices.
   • CUse User-ID to identify the users of the medical devices and create a security policy that allows those users.
   • DUse URL Filtering to block the EHR system's web address for all devices except medical devices.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A media company uses Prisma SD-WAN. The security team wants to block access to social media and streaming websites for all users, but allow access to a specific streaming service used for business purposes. The streaming service uses a domain that is not categorized as social media or streaming. Which approach should the team take?

   • AUse App-ID to block social media and streaming applications, with an exception for the specific streaming service.
   • BUse Device-ID to block the devices used to access social media and streaming sites.
   • CUse DNS Security to block the domains of social media and streaming sites, with an exception for the business streaming service.
   • DUse URL Filtering to block the social media and streaming categories, with an exception for the specific streaming service's domain.
   Reveal Solution Discussion Select an answer first