How does Prisma SaaS provide protection for Sanctioned SaaS applications?
Correct Answer: D
Prisma SaaS connects directly to the applications themselves, therefore providing continuous silent monitoring of the risks within the sanctioned SaaS applications, with detailed visibility that is not possible with traditional security solutions.
Question 17
When signature-based antivirus software detects malware, what three things does it do to provide protection? (Choose three.)
Correct Answer: B,C,D
Signature-based antivirus software is a type of security software that uses signatures to identify malware. Signatures are bits of code that are unique to a specific piece of malware. When signature-based antivirus software detects a piece of malware, it compares the signature to its database of known signatures12. If a match is found, the software can do three things to provide protection: * Alert system administrators: The software can notify the system administrators or the users about the malware detection, and provide information such as the name, type, location, and severity of the malware. This can help the administrators or the users to take appropriate actions to prevent further damage or infection3. * Quarantine the infected file: The software can isolate the infected file from the rest of the system, and prevent it from accessing or modifying any other files or processes. This can help to contain the malware and limit its impact on the system4. * Delete the infected file: The software can remove the infected file from the system, and prevent it from running or spreading. This can help to eliminate the malware and restore the system to a clean state4. What is a signature-based antivirus? - Info Exchange What is a Signature and How Can I detect it? - Sophos How Does Heuristic Analysis Antivirus Software Work? What Is Signature-based Malware Detection? | RiskXchange
Question 18
In which type of Wi-Fi attack does the attacker intercept and redirect the victim's web traffic to serve content from a web server it controls?
Correct Answer: C
A meddler-in-the-middle (MITM) attack is a type of Wi-Fi attack where the attacker intercepts and redirects the victim's web traffic to serve content from a web server it controls. The attacker can use various techniques, such as ARP spoofing, DNS spoofing, or SSL stripping, to trick the victim into connecting to a rogue access point or a proxy server that acts as a middleman between the victim and the legitimate website. The attacker can then modify, inject, or drop the packets that are exchanged between the victim and the website, and perform malicious actions, such as stealing credentials, injecting malware, or displaying fake or misleading content. A MITM attack can compromise the confidentiality, integrity, and availability of the victim's web traffic and expose them to various risks and threats. References: * What is a man-in-the-middle attack? * The 5 most dangerous Wi-Fi attacks, and how to fight them * What Are Sniffing Attacks, and How Can You Protect Yourself?
Question 19
What are two functions of an active monitoring system? (Choose two.)
Correct Answer: B,D
Determining system health using unaltered system data - Active monitoring collects real-time data to assess the current health and performance of systems. Using probes to establish potential load issues - Active monitoring uses synthetic transactions or probes to simulate user interactions and identify performance or load-related issues before they affect users.
Question 20
What role do containers play in cloud migration and application management strategies?
Correct Answer: A
Containers encapsulate applications and their dependencies into lightweight, portable units that can run consistently across multiple environments. This abstraction supports cloud-native development by enabling microservices architectures, rapid deployment, and scaling within orchestration platforms like Kubernetes. Containers accelerate cloud migration by decoupling applications from infrastructure, facilitating automation, and continuous integration/continuous deployment (CI/CD) workflows. Palo Alto Networks addresses container security by integrating runtime protection, vulnerability scanning, and compliance enforcement within its Prisma Cloud platform, ensuring safe adoption of cloud-native tools and methodologies.
