Which method is commonly used to audit data loss prevention activities in Enterprise DLP?

Encrypting all sensitive data to prevent unauthorized access

Reviewing logs that record policy violations and data access events

Configuring access control lists to restrict data access

Deploying network firewalls to block malicious traffic

An organization uses Enterprise SaaS Security to protect data in a cloud-based CRM. They need to ensure that sensitive customer data is encrypted both in transit and at rest, and that encryption keys are managed by the organization. Which configuration should they use?

Use a customer-managed key (CMK) for data at rest and enforce TLS for data in transit.

Rely on the SaaS provider's default encryption settings.

Enable TLS for data in transit and use the provider's built-in encryption for data at rest.

Implement a VPN for all access to the CRM and rely on the VPN for encryption.

Which activity is an example of monitoring and logging in Enterprise SaaS Security?

Configuring multi-factor authentication for all users

Encrypting sensitive files before uploading them to a SaaS application

Setting up a firewall to restrict access to the SaaS application

Reviewing logs of user sign-ins and file downloads from a SaaS application

In Enterprise SaaS Security, what is the primary purpose of monitoring and logging?

To automatically block all unauthorized access attempts

To track user activities and security events within SaaS applications

To manage user permissions and access control policies

To encrypt data stored in SaaS applications

In Enterprise SaaS Security, what is the primary function of access control policies?

To encrypt all data stored in the SaaS application

To monitor user activities and generate security alerts

To define which users or groups can access specific SaaS applications and data

To automatically patch vulnerabilities in the SaaS application

Palo Alto NetworksCertified Network Security Professional

Domain 5Objective 3

5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Part of the Infrastructure Management and CDSS domain, which accounts for 17% of the NETWORK-SECURITY-PROFESSIONAL exam.

27questions here

6free pages

6concepts

17%of the exam

Questions 16–20

16foundation · easy
Which method is commonly used to audit data loss prevention activities in Enterprise DLP?
Select an answer first
17application · medium
An organization uses Enterprise SaaS Security to protect data in a cloud-based CRM. They need to ensure that sensitive customer data is encrypted both in transit and at rest, and that encryption keys are managed by the organization. Which configuration should they use?
Select an answer first
18foundation · easy
Which activity is an example of monitoring and logging in Enterprise SaaS Security?
Select an answer first
19foundation · easy
In Enterprise SaaS Security, what is the primary purpose of monitoring and logging?
Select an answer first
20foundation · easy
In Enterprise SaaS Security, what is the primary function of access control policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.