3.6 Identify and Describe AI-related Security Risks and Mitigation Techniques (e.g., AI Use, Sensitive Data Exposure, AI Application Access, AI-enabled Threats) and Explain How Palo Alto Networks Platform Capabilities Can Help Discover, Monitor, Control, and Secure Them NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A SOC team is investigating a potential insider threat where an employee is suspected of using an AI coding assistant to generate malicious scripts that bypass security controls. The team needs to detect anomalous behavior, such as the employee submitting code snippets that reference internal vulnerabilities, and correlate this with endpoint activity. Which Palo Alto Networks approach provides the most comprehensive monitoring?

   • AWildFire to detonate all code snippets submitted to the AI assistant
   • BAI Access Security to log AI submissions, combined with Cortex XDR behavioral analytics on the employee's endpoint
   • CCortex XSOAR to create a playbook that quarantines the employee's device
   • DPanorama to review firewall logs for the AI assistant domain
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A SOC has detected an AI-generated deepfake audio call that impersonated the CFO and authorized a fraudulent wire transfer. The SOC wants to implement controls to reduce the risk of similar AI-enabled social engineering attacks. Which combination of Palo Alto Networks capabilities provides the most effective defense-in-depth?

   • AAI Access Security to monitor AI tool usage, Cortex XDR to detect anomalous endpoint behavior, and user awareness training
   • BWildFire to analyze all audio files for deepfake signatures
   • CCortex XSOAR to automatically reverse wire transfers
   • DPanorama to block all voice-over-IP traffic
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What type of behavior might Palo Alto Networks monitoring capabilities flag as anomalous in AI usage?

   • AA user accessing the AI application during business hours
   • BA user receiving an error message from the AI application
   • CA user suddenly sending large volumes of sensitive data to an AI application
   • DA user using a supported browser to access the AI application
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security operations center (SOC) has observed a spike in phishing emails that contain highly personalized content referencing internal project names and employee roles. The SOC suspects an attacker is using a public AI chatbot to generate these emails based on leaked corporate data. The SOC needs to confirm this hypothesis and identify which employees may have leaked the data. Which combination of Palo Alto Networks capabilities provides the most direct evidence?

   • AWildFire sandbox reports on the phishing email attachments
   • BPanorama traffic logs showing the source IP of the phishing emails
   • CCortex XSOAR playbook that automatically blocks the chatbot domain
   • DAI Access Security logs showing users who pasted internal project names into the chatbot, correlated with Cortex XDR alerts on the recipients
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a security risk associated with the adoption of AI technologies within an organization?

   • AEmployees may inadvertently share sensitive data with public AI tools
   • BAI tools always require more storage than traditional applications
   • CAI tools cannot be integrated with existing security controls
   • DAI tools automatically reduce the organization's attack surface
   Reveal Solution Discussion Select an answer first