3.6 Identify and Describe AI-related Security Risks and Mitigation Techniques (e.g., AI Use, Sensitive Data Exposure, AI Application Access, AI-enabled Threats) and Explain How Palo Alto Networks Platform Capabilities Can Help Discover, Monitor, Control, and Secure Them NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A marketing agency has adopted several AI tools for content generation, but the IT team has no visibility into which tools are being used or what data is being shared. The agency wants to create an inventory of AI applications and enforce a policy that allows approved tools while blocking unapproved ones. Which Palo Alto Networks feature provides this capability?

   • ACortex Data Lake with a custom log query for AI domains
   • BAI Access Security with application discovery and policy rules
   • CPrisma Cloud with a compliance scan for AI services
   • DGlobalProtect with a host-based firewall rule
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Palo Alto Networks capability is designed to discover AI applications and their associated risks?

   • AAI Security (AI Runtime Security)
   • BPrisma Access
   • CPanorama
   • DCortex XDR
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a potential impact of unauthorized access to an AI application?

   • AThe AI application will become faster
   • BThe AI application will be deleted from the network
   • CThe AI application will automatically shut down
   • DAttackers could manipulate the AI model to produce incorrect or malicious outputs
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A university allows students to use AI tools for coursework but wants to prevent them from using AI to complete exams. The IT department needs to enforce a policy that blocks AI access during exam hours while allowing it at other times. Which Palo Alto Networks capability supports this time-based control?

   • AAI Access Security with scheduled policy rules
   • BGlobalProtect with a host check for AI processes
   • CCortex XDR with a device quarantine during exam hours
   • DPanorama with a static block rule for AI domains
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital network has enabled a new AI diagnostic assistant for its clinicians. The security team is concerned that a compromised clinician account could be used to query the AI for patient records or to alter treatment recommendations. They need to enforce least-privilege access and require step-up authentication for high-risk actions. Which Palo Alto Networks approach directly addresses this requirement?

   • AEnable WildFire to sandbox all AI-generated output files
   • BConfigure AI Access Security with identity-based policies and integrate with an identity provider for MFA on sensitive actions
   • CDeploy a next-generation firewall with a block rule for all AI domains
   • DUse Cortex XSOAR to manually review every AI query log
   Reveal Solution Discussion Select an answer first