3.5 Identify and Describe Quantum Security Risks (e.g., Harvest Now, Decrypt Later Attacks) and Palo Alto Networks Platform Capabilities to Address Them (e.g., Post-Quantum Readiness, Hybrid Cryptography) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A hospital network stores electronic health records (EHRs) that are subject to data retention laws requiring them to be kept for 20 years. The hospital uses Palo Alto Networks firewalls. The compliance officer asks the IT team to assess the quantum risk to this data. What is the most appropriate first step?

   • AIdentify which data has a confidentiality period that extends beyond the expected timeline for quantum decryption
   • BWait for quantum computers to become a reality before taking any action
   • CDisable all VPN connections to prevent data interception
   • DImmediately replace all encryption with post-quantum algorithms
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A national intelligence agency is reviewing its data retention policies. They have intercepted and stored encrypted communications from a foreign adversary for the past 10 years. The agency's analysts want to know which of the following is the most critical factor in determining the risk of a harvest now, decrypt later attack. What should the analysts consider?

   • AThe type of encryption used, as only weak encryption is at risk
   • BThe confidentiality period of the data and the timeline for when a quantum computer capable of breaking the encryption is expected
   • CThe amount of data stored, as more data is always more valuable to an adversary
   • DThe geographic location of the data, as data stored in certain countries is more at risk
   Reveal Solution Discussion Select an answer first