Question 1

A financial services company is migrating its workloads to a cloud-native environment. To ensure robust security, they are considering using a Cloud Native Security Platform (CNSP). Which of the following best aligns with a core tenet of CNSP for securing workloads in a dynamic, multi-cloud environment?

Options :

A : Focusing solely on north-south network traffic inspection between workloads

B : Providing static, signature-based threat detection for workloads in the cloud

C : Applying runtime protection to identify and block anomalous workload behavior

D : Deploying agentless security tools to maintain minimal resource utilization

Answer: C

Question 2

You are configuring a secure network architecture using Palo Alto Networks' Prisma SASE solution. Which of the following components is primarily responsible for providing secure internet access to branch offices and remote users while maintaining consistent security policies?

Options :

A : Prisma SD-WAN

B : Prisma Access

C : Cortex XDR

D : Prisma Cloud

Answer: B

Question 3

In a cloud-based environment, where should a virtual next-generation firewall (NGFW) be deployed to provide optimal protection for applications and data?

Options :

A : In the public subnet of the cloud environment, directly exposed to the internet

B : Between the database servers and the application servers within the same subnet

C : At the ingress/egress points of the virtual private cloud (VPC)

D : Only within a single availability zone to minimize deployment complexity

Answer: C

Question 4

What are two capabilities of identity threat detection and response (ITDR)? (Choose two.)

Options :

A : Securing individual devices

B : Matching risks to signatures

C : Scanning for excessive logins

D : Analyzing access management logs

Answer: C,D

Question 5

Your organization has implemented a Managed Detection and Response (MDR) service alongside an endpoint security platform. During a security audit, the team is reviewing the overlap between the MDR service and Incident Response (IR) tools to understand their roles in the cybersecurity framework. Which of the following statements best highlights the difference between MDR services and IR tools?

Options :

A : MDR services provide real-time threat hunting and response, while IR tools focus on post-incident forensic analysis and remediation.

B : MDR services only monitor alerts, while IR tools perform active threat containment.

C : IR tools are cloud-based, while MDR services are on-premises.

D : MDR services are designed for internal use by cybersecurity teams, while IR tools are outsourced to external consultants.

Answer: A

Free Cybersecurity-Practitioner Mock Exam – Practice Online Confidently

Buying Options: