3.5 Identify and Describe Quantum Security Risks (e.g., Harvest Now, Decrypt Later Attacks) and Palo Alto Networks Platform Capabilities to Address Them (e.g., Post-Quantum Readiness, Hybrid Cryptography) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A manufacturing company uses Palo Alto Networks firewalls for their site-to-site VPNs. They want to prepare for post-quantum security but are concerned about the complexity of the migration. What is the most accurate statement about Palo Alto Networks' approach to post-quantum readiness?

   • APalo Alto Networks does not have a post-quantum readiness plan
   • BPalo Alto Networks has already implemented post-quantum-only algorithms and does not support classical algorithms
   • CPalo Alto Networks requires customers to purchase new hardware to support post-quantum algorithms
   • DPalo Alto Networks provides a migration path that allows customers to enable hybrid cryptography without disrupting existing VPN connections
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A law firm stores client communications that are protected by attorney-client privilege and must remain confidential indefinitely. They use Palo Alto Networks firewalls for all network traffic. The IT director is evaluating quantum risk and asks which data is most at risk from a harvest now, decrypt later attack. What is the correct assessment?

   • AAll encrypted traffic that is intercepted and stored today is at risk, but data with a long confidentiality period is the highest priority
   • BNo data is at risk because quantum computers are not powerful enough to break encryption yet
   • COnly data that is transmitted over the internet is at risk, while data on internal networks is safe
   • DOnly data that is encrypted with weak algorithms like DES is at risk, while AES-256 is completely safe
   Reveal Solution Discussion Select an answer first
4. 8foundation · medium

   When assessing an organization's quantum risk, which factor is most important to consider?

   • AThe sensitivity and longevity of the data being protected.
   • BThe number of employees in the organization.
   • CThe physical location of the data center.
   • DThe brand of firewall used by the organization.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   Which of the following best describes Palo Alto Networks' support for quantum-resistant algorithms?

   • AThey do not support any quantum-resistant algorithms yet; they are waiting for customer demand.
   • BThey support NIST-standardized post-quantum algorithms in their products, such as in VPN and certificate management.
   • CThey have developed proprietary quantum-resistant algorithms that are not based on NIST standards.
   • DThey only support quantum-resistant algorithms in their cloud services, not on-premises firewalls.
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   What is the purpose of hybrid cryptography in Palo Alto Networks' implementation?

   • ATo reduce the computational overhead of encryption by using simpler algorithms.
   • BTo allow customers to choose between classical and post-quantum algorithms based on performance.
   • CTo combine classical and post-quantum algorithms so that security is maintained even if one is broken.
   • DTo use only post-quantum algorithms to ensure maximum security.
   Reveal Solution Discussion Select an answer first