A retail company uses an AI chatbot for customer support. The chatbot can access order history and payment information. The security team wants to ensure that full credit card numbers are never transmitted to the AI vendor's backend for processing. Which DLP control is MOST appropriate?

Encrypt the chat traffic between the customer and the AI backend using TLS.

Require the AI vendor to sign a business associate agreement (BAA) before processing cardholder data.

Tokenize card numbers at the point of capture and pass only the token to the AI backend.

Mask the card number in the chat interface so the customer sees only the last four digits.

A payment card issuer uses an AI model to detect fraudulent transactions. The model is trained on historical transaction data that includes full PANs. The security team wants to reduce the PCI DSS scope of the AI system. Which approach BEST reduces PCI DSS scope while still allowing the model to function?

Tokenize the PANs before storing them in the training dataset and use the tokens for model training.

Encrypt the training dataset at rest using AES-256.

Move the training environment to a dedicated VLAN with strict access controls.

Truncate the PANs to the first six and last four digits in the training dataset.

What is a key requirement of the EU Data Act that affects AI applications?

Prohibiting the use of AI for any data processing

Requiring all data to be stored within the EU

Requiring data holders to share data with users and third parties under certain conditions

Mandating that all AI models be open source

Palo Alto NetworksCertified Network Security Architect

Domain 2Objective 3

2.3 Identify and Explain the Classification and Attributes of AI Applications and Apply Security Controls NETWORK-SECURITY-ARCHITECT Practice Questions (Page 7)

Part of the AI Security domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

33questions here

7free pages

10concepts

11%of the exam

10 Concepts in This Objective

Application sanctioning
Controls for sanctioned AI applications
Data loss prevention (DLP) for AI applications
AI security frameworks overview
GDPR compliance for AI
NIST AI risk management framework
EU Data Act implications for AI
PCI DSS compliance for AI
HIPAA compliance for AI
Applying security controls based on frameworks

Questions 31–33

31application · medium
A retail company uses an AI chatbot for customer support. The chatbot can access order history and payment information. The security team wants to ensure that full credit card numbers are never transmitted to the AI vendor's backend for processing. Which DLP control is MOST appropriate?
Select an answer first
32expert · hard
A payment card issuer uses an AI model to detect fraudulent transactions. The model is trained on historical transaction data that includes full PANs. The security team wants to reduce the PCI DSS scope of the AI system. Which approach BEST reduces PCI DSS scope while still allowing the model to function?
Select an answer first
33foundation · easy
What is a key requirement of the EU Data Act that affects AI applications?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

2.3 Identify and Explain the Classification and Attributes of AI Applications and Apply Security Controls NETWORK-SECURITY-ARCHITECT Practice Questions (Page 7)

Questions 31–33

A retail company uses an AI chatbot for customer support. The chatbot can access order history and payment information. The security team wants to ensure that full credit card numbers are never transmitted to the AI vendor's backend for processing. Which DLP control is MOST appropriate?

What is a key requirement of the EU Data Act that affects AI applications?

Keep studying — AI Security