4.2 Explain the Configuration and Maintenance of Prisma Access (e.g., Security Policies, Profiles, Updates, Upgrades, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–8

1. 6application · medium

   A security analyst needs to investigate a potential data exfiltration incident. They suspect that a user is uploading sensitive data to a cloud storage service. Which log type should they analyze to see the details of the uploads?

   • ASystem health logs, which show the health of the Prisma Access infrastructure.
   • BConfiguration audit logs, which show changes to security policies.
   • CThreat logs, which show any threats detected in the traffic.
   • DTraffic logs, which show the session details including the destination and amount of data transferred.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is using Prisma Access and wants to ensure that they are running the latest content updates to protect against new threats. What is the recommended way to manage content updates?

   • AEnable automatic content updates and schedule them to occur during maintenance windows.
   • BDisable automatic updates and only apply updates when a new threat is reported.
   • CManually check for and apply content updates on a weekly basis.
   • DApply all content updates immediately without scheduling, as they are critical.
   Reveal Solution Discussion Select an answer first
3. 8application · medium

   A company wants to block all traffic to known command-and-control (C2) servers. They have a security rule that allows all outbound traffic. What should they add to this rule to block C2 traffic?

   • AApply a file blocking profile to block all executable files.
   • BEnable SSL decryption on the rule to inspect encrypted C2 traffic.
   • CApply a threat prevention profile that includes anti-spyware and vulnerability protection with actions set to 'block' for C2-related signatures.
   • DApply a URL filtering profile with a 'malware' category action of 'alert'.
   Reveal Solution Discussion Select an answer first