1.4 Implement Continuous Security Scanning of Allowed Traffic to Stop Malware and Exploits NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security architect has implemented continuous security scanning for allowed traffic. The architect wants to verify that the scanning is effective and to identify any threats that were blocked. Which action should the architect take?

   • AReview the threat prevention logs to see which threats were detected and blocked.
   • BReview the traffic logs to see which connections were allowed.
   • CReview the system logs to see if the firewall had any errors.
   • DReview the configuration audit logs to see if the security policy was changed.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of reports in the context of continuous security scanning?

   • ATo replace the need for real-time monitoring
   • BTo configure security policies
   • CTo provide a summary of security events and trends for analysis
   • DTo automatically update threat signatures
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security architect has implemented WildFire integration for a company. The architect wants to monitor the effectiveness of the integration and identify any unknown malware that was detected. Which action should the architect take?

   • AReview the WildFire verdict logs to see which files were identified as malicious.
   • BReview the WildFire submission logs to see which files were sent for analysis.
   • CReview the traffic logs to see which connections were made to WildFire.
   • DReview the configuration logs to see if WildFire was enabled.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a Zero Trust architecture, what is the primary purpose of continuous security scanning of allowed traffic?

   • ATo inspect traffic that has already been permitted by policy for hidden threats
   • BTo replace the need for user authentication and device compliance checks
   • CTo reduce the amount of logging required for permitted connections
   • DTo block all traffic that is not explicitly denied by security policy
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security architect is designing a solution for a company that has a mix of high-priority and low-priority traffic. The company wants to ensure that high-priority traffic is scanned with minimal latency, while low-priority traffic can tolerate higher latency. Which approach should the architect take?

   • AEnable threat prevention only for low-priority traffic to reduce latency for high-priority traffic.
   • BDisable threat prevention for high-priority traffic to reduce latency.
   • CApply the same threat prevention profile to all traffic to ensure consistent security.
   • DCreate separate security policies for high-priority and low-priority traffic, with different threat prevention profiles.
   Reveal Solution Discussion Select an answer first